@manuelstolze/pi-permission-gate 0.2.0 → 0.2.1

package/dist/application/ports/permission-approval-port.d.ts

@@ -0,0 +1,15 @@
+export type PermissionApprovalResult = {
+    kind: "allow-once";
+} | {
+    kind: "allow-session";
+} | {
+    kind: "allow-forever";
+} | {
+    kind: "deny";
+    instruction?: string;
+} | {
+    kind: "unavailable";
+};
+export interface PermissionApprovalPort {
+    request(command: string, description: string): Promise<PermissionApprovalResult>;
+}

package/dist/application/ports/permission-approval-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permission-approval-port.js.map

package/dist/application/ports/permission-approval-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-approval-port.js","sourceRoot":"","sources":["../../../src/application/ports/permission-approval-port.ts"],"names":[],"mappings":""}

package/dist/application/ports/permission-config-port.d.ts

@@ -0,0 +1,14 @@
+import type { CommandPattern } from "../../domain/patterns.js";
+export interface PermissionGateConfiguration {
+    applyBuiltinDefaults?: boolean;
+    dangerousPatterns?: CommandPattern[];
+    allowedPatterns?: CommandPattern[];
+}
+export interface PermissionConfigLoadResult {
+    configuration: PermissionGateConfiguration;
+    error?: Error;
+}
+export interface PermissionConfigPort {
+    load(): PermissionConfigLoadResult;
+    saveExactAllowRule(command: string): CommandPattern;
+}

package/dist/application/ports/permission-config-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permission-config-port.js.map

package/dist/application/ports/permission-config-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-config-port.js","sourceRoot":"","sources":["../../../src/application/ports/permission-config-port.ts"],"names":[],"mappings":""}

package/dist/application/ports/session-approvals-port.d.ts

@@ -0,0 +1,5 @@
+export interface SessionApprovalsPort {
+    clear(): void;
+    has(command: string): boolean;
+    allow(command: string): void;
+}

package/dist/application/ports/session-approvals-port.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session-approvals-port.js.map

package/dist/application/ports/session-approvals-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-approvals-port.js","sourceRoot":"","sources":["../../../src/application/ports/session-approvals-port.ts"],"names":[],"mappings":""}

package/dist/application/use-cases/permission-gate.d.ts

@@ -0,0 +1,27 @@
+import type { PermissionApprovalPort } from "../ports/permission-approval-port.js";
+import type { PermissionConfigPort } from "../ports/permission-config-port.js";
+import type { SessionApprovalsPort } from "../ports/session-approvals-port.js";
+export type PermissionGateOutcome = {
+    kind: "allow";
+} | {
+    kind: "allow-forever";
+    command: string;
+} | {
+    kind: "auto-deny";
+    pattern: string;
+    reason: string;
+} | {
+    kind: "approval-unavailable";
+    description: string;
+} | {
+    kind: "user-deny";
+    instruction?: string;
+} | {
+    kind: "permanent-allow-failed";
+    error: Error;
+};
+export interface PermissionGate {
+    startSession(): Error | undefined;
+    handleCommand(command: string, approval: PermissionApprovalPort): Promise<PermissionGateOutcome>;
+}
+export declare function createPermissionGate(config: PermissionConfigPort, sessionApprovals: SessionApprovalsPort): PermissionGate;

package/dist/application/use-cases/permission-gate.js

@@ -0,0 +1,58 @@
+import { BUILTIN_DANGEROUS_PATTERNS, evaluateCommand } from "../../domain/permission-rules.js";
+export function createPermissionGate(config, sessionApprovals) {
+    let allowedPatterns = [];
+    let dangerousPatterns = [];
+    function startSession() {
+        sessionApprovals.clear();
+        const result = config.load();
+        const settings = result.error ? {} : result.configuration;
+        const applyBuiltinDefaults = settings.applyBuiltinDefaults !== false;
+        dangerousPatterns = applyBuiltinDefaults
+            ? [...(settings.dangerousPatterns ?? []), ...BUILTIN_DANGEROUS_PATTERNS]
+            : (settings.dangerousPatterns ?? []);
+        allowedPatterns = settings.allowedPatterns ?? [];
+        return result.error;
+    }
+    async function handleCommand(command, approval) {
+        const evaluation = evaluateCommand(command, sessionApprovals.has(command), allowedPatterns, dangerousPatterns);
+        if (evaluation.kind === "auto-deny") {
+            return {
+                kind: "auto-deny",
+                pattern: evaluation.rule.pattern,
+                reason: evaluation.rule.reason,
+            };
+        }
+        if (evaluation.kind === "allow")
+            return { kind: "allow" };
+        const description = evaluation.pattern.description ?? evaluation.pattern.pattern;
+        const result = await approval.request(command, description);
+        if (result.kind === "unavailable") {
+            return { kind: "approval-unavailable", description };
+        }
+        if (result.kind === "allow-once")
+            return { kind: "allow" };
+        if (result.kind === "allow-session") {
+            sessionApprovals.allow(command);
+            return { kind: "allow" };
+        }
+        if (result.kind === "allow-forever") {
+            try {
+                const rule = config.saveExactAllowRule(command);
+                if (!allowedPatterns.some((item) => item.pattern === rule.pattern && item.regex === true)) {
+                    allowedPatterns.push(rule);
+                }
+                return { kind: "allow-forever", command };
+            }
+            catch (error) {
+                return {
+                    kind: "permanent-allow-failed",
+                    error: error instanceof Error ? error : new Error(String(error)),
+                };
+            }
+        }
+        const instruction = result.instruction?.trim();
+        return instruction ? { kind: "user-deny", instruction } : { kind: "user-deny" };
+    }
+    return { startSession, handleCommand };
+}
+//# sourceMappingURL=permission-gate.js.map

package/dist/application/use-cases/permission-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-gate.js","sourceRoot":"","sources":["../../../src/application/use-cases/permission-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAmB/F,MAAM,UAAU,oBAAoB,CAClC,MAA4B,EAC5B,gBAAsC;IAEtC,IAAI,eAAe,GAAqB,EAAE,CAAC;IAC3C,IAAI,iBAAiB,GAAqB,EAAE,CAAC;IAE7C,SAAS,YAAY;QACnB,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAC1D,MAAM,oBAAoB,GAAG,QAAQ,CAAC,oBAAoB,KAAK,KAAK,CAAC;QAErE,iBAAiB,GAAG,oBAAoB;YACtC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC,EAAE,GAAG,0BAA0B,CAAC;YACxE,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QACvC,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;QAEjD,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,UAAU,aAAa,CAC1B,OAAe,EACf,QAAgC;QAEhC,MAAM,UAAU,GAAG,eAAe,CAChC,OAAO,EACP,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAC7B,eAAe,EACf,iBAAiB,CAClB,CAAC;QAEF,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO;gBAChC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAC/B,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAE1D,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,WAAW,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC;QACjF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE5D,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3D,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACpC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;oBAC1F,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,IAAI,EAAE,wBAAwB;oBAC9B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;iBACjE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/C,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAClF,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACzC,CAAC"}

package/dist/domain/patterns.d.ts

@@ -0,0 +1,7 @@
+export interface CommandPattern {
+    pattern: string;
+    regex?: boolean;
+    description?: string;
+}
+export declare function matchesCommandPattern(pattern: CommandPattern, command: string): boolean;
+export declare function findCommandPattern(command: string, patterns: CommandPattern[]): CommandPattern | undefined;

package/dist/domain/patterns.js

@@ -0,0 +1,15 @@
+export function matchesCommandPattern(pattern, command) {
+    if (pattern.regex) {
+        try {
+            return new RegExp(pattern.pattern).test(command);
+        }
+        catch {
+            return false;
+        }
+    }
+    return command.includes(pattern.pattern);
+}
+export function findCommandPattern(command, patterns) {
+    return patterns.find((pattern) => matchesCommandPattern(pattern, command));
+}
+//# sourceMappingURL=patterns.js.map

package/dist/domain/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/domain/patterns.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,qBAAqB,CAAC,OAAuB,EAAE,OAAe;IAC5E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,QAA0B;IAE1B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/domain/permission-rules.d.ts

@@ -0,0 +1,17 @@
+import { type CommandPattern } from "./patterns.js";
+export interface AutoDenyRule {
+    pattern: string;
+    reason: string;
+}
+export declare const AUTO_DENY_RULES: AutoDenyRule[];
+export declare const BUILTIN_DANGEROUS_PATTERNS: CommandPattern[];
+export type CommandEvaluation = {
+    kind: "auto-deny";
+    rule: AutoDenyRule;
+} | {
+    kind: "allow";
+} | {
+    kind: "requires-approval";
+    pattern: CommandPattern;
+};
+export declare function evaluateCommand(command: string, sessionAllowed: boolean, allowedPatterns: CommandPattern[], dangerousPatterns: CommandPattern[]): CommandEvaluation;

package/dist/domain/permission-rules.js

@@ -0,0 +1,41 @@
+import { findCommandPattern } from "./patterns.js";
+export const AUTO_DENY_RULES = [
+    { pattern: "az group delete", reason: "deletes an entire Azure resource group and all its resources" },
+    { pattern: "az subscription cancel", reason: "cancels the entire Azure subscription" },
+    { pattern: "az account management-group delete", reason: "deletes Azure management group hierarchy" },
+    { pattern: "az ad user delete", reason: "deletes an Azure AD user" },
+    { pattern: "az ad group delete", reason: "deletes an Azure AD security group" },
+    { pattern: "az lock delete", reason: "removes an Azure resource lock (enables further destruction)" },
+    { pattern: "az keyvault purge", reason: "permanently purges a Key Vault, bypassing soft-delete" },
+    { pattern: "kubectl delete namespace", reason: "deletes a Kubernetes namespace and all resources inside" },
+    { pattern: "kubectl delete --all", reason: "deletes all Kubernetes resources of a type" },
+    { pattern: "kubectl drain", reason: "evicts all pods from a Kubernetes node" },
+];
+export const BUILTIN_DANGEROUS_PATTERNS = [
+    { pattern: "rm -rf", description: "recursive force delete" },
+    { pattern: "sudo", description: "superuser command" },
+    { pattern: "dd of=", description: "disk write operation" },
+    { pattern: "mkfs.", description: "filesystem format" },
+    { pattern: "chmod -R 777", description: "insecure recursive permissions" },
+    { pattern: "chown -R", description: "recursive ownership change" },
+    { pattern: "doas", description: "privileged command execution" },
+    { pattern: "pkexec", description: "privileged command execution" },
+    { pattern: "shred", description: "secure file overwrite" },
+    { pattern: "wipefs", description: "filesystem signature wipe" },
+    { pattern: "blkdiscard", description: "block device discard" },
+    { pattern: "fdisk", description: "disk partitioning" },
+    { pattern: "parted", description: "disk partitioning" },
+    { pattern: "docker run --privileged", description: "container with privileged mode" },
+];
+export function evaluateCommand(command, sessionAllowed, allowedPatterns, dangerousPatterns) {
+    const autoDenyRule = AUTO_DENY_RULES.find((rule) => command.includes(rule.pattern));
+    if (autoDenyRule)
+        return { kind: "auto-deny", rule: autoDenyRule };
+    if (sessionAllowed || findCommandPattern(command, allowedPatterns))
+        return { kind: "allow" };
+    const dangerousPattern = findCommandPattern(command, dangerousPatterns);
+    return dangerousPattern
+        ? { kind: "requires-approval", pattern: dangerousPattern }
+        : { kind: "allow" };
+}
+//# sourceMappingURL=permission-rules.js.map

package/dist/domain/permission-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-rules.js","sourceRoot":"","sources":["../../src/domain/permission-rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAuB,MAAM,eAAe,CAAC;AAOxE,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IACtG,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,uCAAuC,EAAE;IACtF,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,0CAA0C,EAAE;IACrG,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IACpE,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAC/E,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IACrG,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,uDAAuD,EAAE;IACjG,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,yDAAyD,EAAE;IAC1G,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,4CAA4C,EAAE;IACzF,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,wCAAwC,EAAE;CAC/E,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAqB;IAC1D,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAC5D,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACrD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC1D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACtD,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC1E,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,4BAA4B,EAAE;IAClE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAChE,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAClE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC1D,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC/D,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC9D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACtD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACvD,EAAE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,gCAAgC,EAAE;CACtF,CAAC;AAOF,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,cAAuB,EACvB,eAAiC,EACjC,iBAAmC;IAEnC,MAAM,YAAY,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,IAAI,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAEnE,IAAI,cAAc,IAAI,kBAAkB,CAAC,OAAO,EAAE,eAAe,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAE7F,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACxE,OAAO,gBAAgB;QACrB,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,gBAAgB,EAAE;QAC1D,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACxB,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { type ExtensionFactory } from "@earendil-works/pi-coding-agent";
+import type { ExtensionFactory } from "@earendil-works/pi-coding-agent";
 declare const permissionGate: ExtensionFactory;
 export default permissionGate;

package/dist/index.js

@@ -1,111 +1,10 @@
-import { isToolCallEventType } from "@earendil-works/pi-coding-agent";
-import { createDialog } from "./dialog.js";
-import { BUILTIN_PATTERNS, findPattern, readConfig, testPattern, writeExactAllowRule, } from "./config.js";
-import { findAutoDenyMatch } from "./rules.js";
+import { createPermissionGate } from "./application/use-cases/permission-gate.js";
+import { FilePermissionConfigAdapter } from "./infrastructure/config/file-permission-config-adapter.js";
+import { registerPermissionGate } from "./interface/pi/extension.js";
+import { InMemorySessionApprovals } from "./interface/pi/session-approvals.js";
 const permissionGate = (pi) => {
-    const sessionAllowedCommands = new Set();
-    let allowedPatterns = [];
-    let dangerPatterns = [];
-    let configError;
-    function reportPermissionGate(active, label) {
-        if (process.env.HERDR_ENV !== "1")
-            return;
-        pi.events.emit("herdr:blocked", { active, label });
-    }
-    function loadConfig() {
-        sessionAllowedCommands.clear();
-        const result = readConfig();
-        configError = result.error;
-        const config = result.error ? {} : result.config;
-        const applyDefaults = config.applyBuiltinDefaults !== false;
-        const customPatterns = config.permissionGate?.patterns ?? [];
-        dangerPatterns = applyDefaults ? [...customPatterns, ...BUILTIN_PATTERNS] : customPatterns;
-        allowedPatterns = config.permissionGate?.allowedPatterns ?? [];
-    }
-    pi.on("session_start", (_event, ctx) => {
-        loadConfig();
-        if (configError) {
-            ctx.ui.notify(`Could not read guardrails.json. Using built-in dangerous-command patterns. ${configError.message}`, "warning");
-        }
-    });
-    pi.on("tool_call", async (event, ctx) => {
-        if (!isToolCallEventType("bash", event))
-            return;
-        const command = event.input.command;
-        // Auto-deny checks must run first. Config allow rules cannot override them.
-        const autoDeny = findAutoDenyMatch(command);
-        if (autoDeny) {
-            ctx.ui.notify(`Auto-blocked: ${autoDeny.pattern} — ${autoDeny.reason}`, "error");
-            return { block: true, reason: `Catastrophic command auto-blocked: ${autoDeny.reason}` };
-        }
-        if (sessionAllowedCommands.has(command))
-            return;
-        if (allowedPatterns.some((pattern) => testPattern(pattern, command)))
-            return;
-        const match = findPattern(command, dangerPatterns);
-        if (!match)
-            return;
-        const description = match.description ?? match.pattern;
-        if (!ctx.hasUI) {
-            return {
-                block: true,
-                reason: `Dangerous command blocked (no UI to confirm): ${description}`,
-            };
-        }
-        reportPermissionGate(true, `Permission gate: ${description}`);
-        try {
-            let result = await ctx.ui.custom(createDialog(command, description));
-            // RPC and headless UI contexts can return undefined for custom dialogs.
-            if (result === undefined) {
-                const selection = await ctx.ui.select(`Dangerous command: ${description}`, [
-                    "1 - Allow once",
-                    "2 - Allow this session",
-                    "3 - Allow forever",
-                    "4 - Deny (tell pi what to do instead)",
-                ]);
-                if (selection?.startsWith("1"))
-                    result = "allow-once";
-                else if (selection?.startsWith("2"))
-                    result = "allow-session";
-                else if (selection?.startsWith("3"))
-                    result = "allow-forever";
-                else
-                    result = "deny";
-            }
-            if (result === "allow-once")
-                return;
-            if (result === "allow-session") {
-                sessionAllowedCommands.add(command);
-                return;
-            }
-            if (result === "allow-forever") {
-                try {
-                    const rule = writeExactAllowRule(command);
-                    if (!allowedPatterns.some((item) => item.pattern === rule.pattern && item.regex === true)) {
-                        allowedPatterns.push(rule);
-                    }
-                    ctx.ui.notify(`Added an exact command to the global allowlist: ${command.slice(0, 60)}${command.length > 60 ? "…" : ""}`, "info");
-                    return;
-                }
-                catch (error) {
-                    const message = error instanceof Error ? error.message : String(error);
-                    ctx.ui.notify(`Could not save the allow rule. Command remains blocked. ${message}`, "error");
-                    return { block: true, reason: "Could not save the permanent allow rule" };
-                }
-            }
-            const instruction = await ctx.ui.input("Tell pi what to do instead:", "");
-            if (instruction?.trim()) {
-                pi.sendUserMessage(`The command \`${command}\` was blocked. Please do the following instead: ${instruction.trim()}`, { deliverAs: "steer" });
-            }
-            else {
-                ctx.ui.notify("Command blocked.", "error");
-            }
-            return { block: true, reason: "User denied dangerous command" };
-        }
-        finally {
-            reportPermissionGate(false);
-        }
-    });
+    const gate = createPermissionGate(new FilePermissionConfigAdapter(), new InMemorySessionApprovals());
+    registerPermissionGate(pi, gate);
 };
 export default permissionGate;
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAyB,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,WAAW,EACX,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,cAAc,GAAqB,CAAC,EAAE,EAAE,EAAE;IAC9C,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,IAAI,eAAe,GAAoB,EAAE,CAAC;IAC1C,IAAI,cAAc,GAAoB,EAAE,CAAC;IACzC,IAAI,WAA8B,CAAC;IAEnC,SAAS,oBAAoB,CAAC,MAAe,EAAE,KAAc;QAC3D,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG;YAAE,OAAO;QAC1C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,SAAS,UAAU;QACjB,sBAAsB,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,KAAK,KAAK,CAAC;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,EAAE,QAAQ,IAAI,EAAE,CAAC;QAE7D,cAAc,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;QAC3F,eAAe,GAAG,MAAM,CAAC,cAAc,EAAE,eAAe,IAAI,EAAE,CAAC;IACjE,CAAC;IAED,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACrC,UAAU,EAAE,CAAC;QACb,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,EAAE,CAAC,MAAM,CACX,8EAA8E,WAAW,CAAC,OAAO,EAAE,EACnG,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO;QAEhD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAEpC,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,QAAQ,CAAC,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YACjF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1F,CAAC;QAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QAChD,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO;QAE7E,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC;QACvD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,iDAAiD,WAAW,EAAE;aACvE,CAAC;QACJ,CAAC;QAED,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,WAAW,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAEpF,wEAAwE;YACxE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,WAAW,EAAE,EAAE;oBACzE,gBAAgB;oBAChB,wBAAwB;oBACxB,mBAAmB;oBACnB,uCAAuC;iBACxC,CAAC,CAAC;gBACH,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,YAAY,CAAC;qBACjD,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,eAAe,CAAC;qBACzD,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,eAAe,CAAC;;oBACzD,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;YAED,IAAI,MAAM,KAAK,YAAY;gBAAE,OAAO;YACpC,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;oBAC1C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;wBAC1F,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBACD,GAAG,CAAC,EAAE,CAAC,MAAM,CACX,mDAAmD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1G,MAAM,CACP,CAAC;oBACF,OAAO;gBACT,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,2DAA2D,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;oBAC7F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;gBAC5E,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;YAC1E,IAAI,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;gBACxB,EAAE,CAAC,eAAe,CAChB,iBAAiB,OAAO,oDAAoD,WAAW,CAAC,IAAI,EAAE,EAAE,EAChG,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QAClE,CAAC;gBAAS,CAAC;YACT,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2DAA2D,CAAC;AACxG,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAE/E,MAAM,cAAc,GAAqB,CAAC,EAAE,EAAE,EAAE;IAC9C,MAAM,IAAI,GAAG,oBAAoB,CAC/B,IAAI,2BAA2B,EAAE,EACjC,IAAI,wBAAwB,EAAE,CAC/B,CAAC;IACF,sBAAsB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC,CAAC;AAEF,eAAe,cAAc,CAAC"}

package/dist/infrastructure/config/file-permission-config-adapter.d.ts

@@ -0,0 +1,9 @@
+import type { PermissionConfigLoadResult, PermissionConfigPort } from "../../application/ports/permission-config-port.js";
+import type { CommandPattern } from "../../domain/patterns.js";
+export declare function getConfigPath(): string;
+export declare class FilePermissionConfigAdapter implements PermissionConfigPort {
+    private readonly path;
+    constructor(path?: string);
+    load(): PermissionConfigLoadResult;
+    saveExactAllowRule(command: string): CommandPattern;
+}

package/dist/infrastructure/config/file-permission-config-adapter.js

@@ -0,0 +1,94 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+export function getConfigPath() {
+    return join(homedir(), ".pi", "agent", "extensions", "guardrails.json");
+}
+export class FilePermissionConfigAdapter {
+    path;
+    constructor(path = getConfigPath()) {
+        this.path = path;
+    }
+    load() {
+        const result = readStoredConfig(this.path);
+        if (result.error)
+            return { configuration: {}, error: result.error };
+        return {
+            configuration: {
+                applyBuiltinDefaults: result.config.applyBuiltinDefaults,
+                dangerousPatterns: result.config.permissionGate?.patterns,
+                allowedPatterns: result.config.permissionGate?.allowedPatterns,
+            },
+        };
+    }
+    saveExactAllowRule(command) {
+        const result = readStoredConfig(this.path);
+        if (result.error) {
+            throw new Error(`Cannot update invalid guardrails config: ${result.error.message}`);
+        }
+        const config = result.config;
+        const permissionGate = config.permissionGate ?? {};
+        const allowedPatterns = permissionGate.allowedPatterns ?? [];
+        const rule = { pattern: `^${escapeRegex(command)}$`, regex: true };
+        if (!allowedPatterns.some((item) => item.pattern === rule.pattern && item.regex === true)) {
+            allowedPatterns.push(rule);
+        }
+        config.permissionGate = { ...permissionGate, allowedPatterns };
+        mkdirSync(dirname(this.path), { recursive: true });
+        writeFileSync(this.path, `${JSON.stringify(config, null, 2)}\n`, "utf-8");
+        return rule;
+    }
+}
+function readStoredConfig(path) {
+    let content;
+    try {
+        content = readFileSync(path, "utf-8");
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === "ENOENT")
+            return { config: {} };
+        return { config: {}, error: asError(error) };
+    }
+    try {
+        const parsed = JSON.parse(content);
+        if (!isGuardrailsConfig(parsed))
+            throw new Error("guardrails.json has an invalid structure");
+        return { config: parsed };
+    }
+    catch (error) {
+        return { config: {}, error: asError(error) };
+    }
+}
+function escapeRegex(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function isGuardrailsConfig(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.applyBuiltinDefaults !== undefined && typeof value.applyBuiltinDefaults !== "boolean")
+        return false;
+    if (value.permissionGate === undefined)
+        return true;
+    if (!isRecord(value.permissionGate))
+        return false;
+    return isPatternList(value.permissionGate.patterns) && isPatternList(value.permissionGate.allowedPatterns);
+}
+function isPatternList(value) {
+    return value === undefined || (Array.isArray(value) && value.every(isPatternConfig));
+}
+function isPatternConfig(value) {
+    return (isRecord(value) &&
+        typeof value.pattern === "string" &&
+        (value.regex === undefined || typeof value.regex === "boolean") &&
+        (value.description === undefined || typeof value.description === "string"));
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+function asError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+//# sourceMappingURL=file-permission-config-adapter.js.map

package/dist/infrastructure/config/file-permission-config-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-permission-config-adapter.js","sourceRoot":"","sources":["../../../src/infrastructure/config/file-permission-config-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAY1C,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,OAAO,2BAA2B;IACT,IAAI;IAAjC,YAA6B,IAAI,GAAG,aAAa,EAAE;oBAAtB,IAAI;IAAqB,CAAC;IAEvD,IAAI;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAEpE,OAAO;YACL,aAAa,EAAE;gBACb,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB;gBACxD,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ;gBACzD,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,eAAe;aAC/D;SACF,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,OAAe;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;QACnD,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,IAAI,EAAE,CAAC;QAC7D,MAAM,IAAI,GAAmB,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAEnF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;YAC1F,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,eAAe,EAAE,CAAC;QAC/D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9G,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;AAC7G,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;QAC/D,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/{dialog.js → interface/pi/dialog.js}

@@ -1,5 +1,5 @@
-import { DynamicBorder, } from "@earendil-works/pi-coding-agent";
-import { Container, Key, Spacer, Text, matchesKey, wrapTextWithAnsi, } from "@earendil-works/pi-tui";
+import { DynamicBorder } from "@earendil-works/pi-coding-agent";
+import { Container, Key, Spacer, Text, matchesKey, wrapTextWithAnsi } from "@earendil-works/pi-tui";
 const OPTIONS = [
     { label: "Allow once", result: "allow-once" },
     { label: "Allow this session", result: "allow-session" },

package/dist/interface/pi/dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialog.js","sourceRoot":"","sources":["../../../src/interface/pi/dialog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAIpG,MAAM,OAAO,GAAoD;IAC/D,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;IAC7C,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,eAAe,EAAE;IACxD,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE;IACnD,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,EAAE;CAC/D,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAOjC,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,WAAmB;IAC/D,OAAO,CACL,GAA2E,EAC3E,KAAmB,EACnB,GAAY,EACZ,IAAqC,EACrC,EAAE;QACF,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,mBAAmB,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1D,SAAS,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnG,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,0BAA0B,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACrC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACxC,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,UAAU,IAAI,WAAW;YAAE,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrE,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAChB,IAAI,IAAI,CACN,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,+DAA+D,CAAC,EAChF,CAAC,EACD,CAAC,CACF,CACF,CAAC;QACF,SAAS,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAEjD,MAAM,WAAW,GAAG,CAAC,YAAoB,EAAE,EAAE;YAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBACvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;gBACpF,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAC9D,OAAO,EAAE,KAAK,GAAG,CAAC;oBAClB,QAAQ;iBACT,CAAC,CAAC,CAAC;YACN,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACvE,OAAO;gBACL,MAAM;gBACN,UAAU;gBACV,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC;aACvD,CAAC;QACJ,CAAC,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC5C,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;gBAChF,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC9D,MAAM,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,CAAC;gBACpF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,iBAAiB,CAAC,CAAC;gBAClD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;gBAE9F,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE;oBACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBACrC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBAC/E,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;gBACtF,CAAC,CAAC;gBAEF,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvF,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnE,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAEtF,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,KAAK,GAAG,GAAG,KAAK,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,CAAE,CAAC,KAAK,EAAE,CAAC;oBACvD,UAAU,CAAC,OAAO,CAChB,KAAK,KAAK,aAAa;wBACrB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE;wBACrE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,EAAE,CAAC,CAClC,CAAC;gBACJ,CAAC;gBAED,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE;YACxC,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE;gBAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBAC3D,MAAM,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;gBAEhD,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,aAAa,GAAG,CAAC,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;oBACtE,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,aAAa,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;oBACrD,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;oBAC7C,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;oBACrD,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAE,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,eAAe,CAAC,CAAC;gBACxB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,eAAe,CAAC,CAAC;gBACxB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxF,IAAI,CAAC,MAAM,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/interface/pi/extension.d.ts

@@ -0,0 +1,3 @@
+import { type ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import type { PermissionGate } from "../../application/use-cases/permission-gate.js";
+export declare function registerPermissionGate(pi: ExtensionAPI, gate: PermissionGate): void;

package/dist/interface/pi/extension.js

@@ -0,0 +1,56 @@
+import { isToolCallEventType } from "@earendil-works/pi-coding-agent";
+import { PiPermissionApprovalAdapter } from "./permission-approval-adapter.js";
+export function registerPermissionGate(pi, gate) {
+    function reportPermissionGate(active, label) {
+        if (process.env.HERDR_ENV !== "1")
+            return;
+        pi.events.emit("herdr:blocked", { active, label });
+    }
+    pi.on("session_start", (_event, context) => {
+        const configError = gate.startSession();
+        if (configError) {
+            context.ui.notify(`Could not read guardrails.json. Using built-in dangerous-command patterns. ${configError.message}`, "warning");
+        }
+    });
+    pi.on("tool_call", async (event, context) => {
+        if (!isToolCallEventType("bash", event))
+            return;
+        const command = event.input.command;
+        const approval = new PiPermissionApprovalAdapter({
+            hasUI: context.hasUI,
+            custom: (dialog) => context.ui.custom(dialog),
+            select: (title, choices) => context.ui.select(title, choices),
+            input: (prompt, defaultValue) => context.ui.input(prompt, defaultValue),
+        }, (description) => reportPermissionGate(true, `Permission gate: ${description}`), () => reportPermissionGate(false));
+        const outcome = await gate.handleCommand(command, approval);
+        switch (outcome.kind) {
+            case "allow":
+                return;
+            case "allow-forever":
+                context.ui.notify(`Added an exact command to the global allowlist: ${outcome.command.slice(0, 60)}${outcome.command.length > 60 ? "…" : ""}`, "info");
+                return;
+            case "auto-deny":
+                context.ui.notify(`Auto-blocked: ${outcome.pattern} — ${outcome.reason}`, "error");
+                return { block: true, reason: `Catastrophic command auto-blocked: ${outcome.reason}` };
+            case "approval-unavailable":
+                return {
+                    block: true,
+                    reason: `Dangerous command blocked (no UI to confirm): ${outcome.description}`,
+                };
+            case "user-deny":
+                if (outcome.instruction) {
+                    pi.sendUserMessage(`The command \`${command}\` was blocked. Please do the following instead: ${outcome.instruction}`, { deliverAs: "steer" });
+                }
+                else {
+                    context.ui.notify("Command blocked.", "error");
+                }
+                return { block: true, reason: "User denied dangerous command" };
+            case "permanent-allow-failed": {
+                const message = outcome.error.message;
+                context.ui.notify(`Could not save the allow rule. Command remains blocked. ${message}`, "error");
+                return { block: true, reason: "Could not save the permanent allow rule" };
+            }
+        }
+    });
+}
+//# sourceMappingURL=extension.js.map

package/dist/interface/pi/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../../../src/interface/pi/extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAqB,MAAM,iCAAiC,CAAC;AAGzF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAE/E,MAAM,UAAU,sBAAsB,CAAC,EAAgB,EAAE,IAAoB;IAC3E,SAAS,oBAAoB,CAAC,MAAe,EAAE,KAAc;QAC3D,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG;YAAE,OAAO;QAC1C,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,EAAE,CAAC,MAAM,CACf,8EAA8E,WAAW,CAAC,OAAO,EAAE,EACnG,SAAS,CACV,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC1C,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC;YAAE,OAAO;QAEhD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,2BAA2B,CAC9C;YACE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAgB,MAAM,CAAC;YAC5D,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;YAC7D,KAAK,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC;SACxE,EACD,CAAC,WAAW,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,WAAW,EAAE,CAAC,EAC9E,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAClC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE5D,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,OAAO;gBACV,OAAO;YACT,KAAK,eAAe;gBAClB,OAAO,CAAC,EAAE,CAAC,MAAM,CACf,mDAAmD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAC1H,MAAM,CACP,CAAC;gBACF,OAAO;YACT,KAAK,WAAW;gBACd,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,OAAO,CAAC,OAAO,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;gBACnF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACzF,KAAK,sBAAsB;gBACzB,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,iDAAiD,OAAO,CAAC,WAAW,EAAE;iBAC/E,CAAC;YACJ,KAAK,WAAW;gBACd,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;oBACxB,EAAE,CAAC,eAAe,CAChB,iBAAiB,OAAO,oDAAoD,OAAO,CAAC,WAAW,EAAE,EACjG,EAAE,SAAS,EAAE,OAAO,EAAE,CACvB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;gBACjD,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YAClE,KAAK,wBAAwB,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,2DAA2D,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;gBACjG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/interface/pi/permission-approval-adapter.d.ts

@@ -0,0 +1,16 @@
+import type { PermissionApprovalPort, PermissionApprovalResult } from "../../application/ports/permission-approval-port.js";
+import { createDialog, type ConfirmResult } from "./dialog.js";
+interface PiApprovalContext {
+    hasUI: boolean;
+    custom(dialog: ReturnType<typeof createDialog>): Promise<ConfirmResult | undefined>;
+    select(title: string, choices: string[]): Promise<string | undefined>;
+    input(prompt: string, defaultValue?: string): Promise<string | undefined>;
+}
+export declare class PiPermissionApprovalAdapter implements PermissionApprovalPort {
+    private readonly context;
+    private readonly reportActive;
+    private readonly reportInactive;
+    constructor(context: PiApprovalContext, reportActive: (description: string) => void, reportInactive: () => void);
+    request(command: string, description: string): Promise<PermissionApprovalResult>;
+}
+export {};

package/dist/interface/pi/permission-approval-adapter.js

@@ -0,0 +1,47 @@
+import { createDialog } from "./dialog.js";
+export class PiPermissionApprovalAdapter {
+    context;
+    reportActive;
+    reportInactive;
+    constructor(context, reportActive, reportInactive) {
+        this.context = context;
+        this.reportActive = reportActive;
+        this.reportInactive = reportInactive;
+    }
+    async request(command, description) {
+        if (!this.context.hasUI)
+            return { kind: "unavailable" };
+        this.reportActive(description);
+        try {
+            let result = await this.context.custom(createDialog(command, description));
+            // RPC and headless UI contexts can return undefined for custom dialogs.
+            if (result === undefined) {
+                const selection = await this.context.select(`Dangerous command: ${description}`, [
+                    "1 - Allow once",
+                    "2 - Allow this session",
+                    "3 - Allow forever",
+                    "4 - Deny (tell pi what to do instead)",
+                ]);
+                if (selection?.startsWith("1"))
+                    result = "allow-once";
+                else if (selection?.startsWith("2"))
+                    result = "allow-session";
+                else if (selection?.startsWith("3"))
+                    result = "allow-forever";
+                else
+                    result = "deny";
+            }
+            if (result === "allow-once")
+                return { kind: "allow-once" };
+            if (result === "allow-session")
+                return { kind: "allow-session" };
+            if (result === "allow-forever")
+                return { kind: "allow-forever" };
+            return { kind: "deny", instruction: await this.context.input("Tell pi what to do instead:", "") };
+        }
+        finally {
+            this.reportInactive();
+        }
+    }
+}
+//# sourceMappingURL=permission-approval-adapter.js.map

package/dist/interface/pi/permission-approval-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-approval-adapter.js","sourceRoot":"","sources":["../../../src/interface/pi/permission-approval-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAC;AAS/D,MAAM,OAAO,2BAA2B;IAEnB,OAAO;IACP,YAAY;IACZ,cAAc;IAHjC,YACmB,OAA0B,EAC1B,YAA2C,EAC3C,cAA0B;uBAF1B,OAAO;4BACP,YAAY;8BACZ,cAAc;IAC9B,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,WAAmB;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAExD,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;YAE3E,wEAAwE;YACxE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,sBAAsB,WAAW,EAAE,EAAE;oBAC/E,gBAAgB;oBAChB,wBAAwB;oBACxB,mBAAmB;oBACnB,uCAAuC;iBACxC,CAAC,CAAC;gBACH,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,YAAY,CAAC;qBACjD,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,eAAe,CAAC;qBACzD,IAAI,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,eAAe,CAAC;;oBACzD,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;YAED,IAAI,MAAM,KAAK,YAAY;gBAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC3D,IAAI,MAAM,KAAK,eAAe;gBAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YACjE,IAAI,MAAM,KAAK,eAAe;gBAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;YAEjE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,CAAC,EAAE,CAAC;QACpG,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/interface/pi/session-approvals.d.ts

@@ -0,0 +1,7 @@
+import type { SessionApprovalsPort } from "../../application/ports/session-approvals-port.js";
+export declare class InMemorySessionApprovals implements SessionApprovalsPort {
+    private readonly commands;
+    clear(): void;
+    has(command: string): boolean;
+    allow(command: string): void;
+}

package/dist/interface/pi/session-approvals.js

@@ -0,0 +1,13 @@
+export class InMemorySessionApprovals {
+    commands = new Set();
+    clear() {
+        this.commands.clear();
+    }
+    has(command) {
+        return this.commands.has(command);
+    }
+    allow(command) {
+        this.commands.add(command);
+    }
+}
+//# sourceMappingURL=session-approvals.js.map

package/dist/interface/pi/session-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-approvals.js","sourceRoot":"","sources":["../../../src/interface/pi/session-approvals.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,wBAAwB;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@manuelstolze/pi-permission-gate",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Pi extension that asks before running dangerous bash commands.",
   "type": "module",
   "license": "MIT",

package/dist/config.d.ts

@@ -1,21 +0,0 @@
-export interface PatternConfig {
-    pattern: string;
-    regex?: boolean;
-    description?: string;
-}
-export interface GuardrailsConfig {
-    applyBuiltinDefaults?: boolean;
-    permissionGate?: {
-        patterns?: PatternConfig[];
-        allowedPatterns?: PatternConfig[];
-    };
-}
-export declare const BUILTIN_PATTERNS: PatternConfig[];
-export declare function getConfigPath(): string;
-export declare function readConfig(path?: string): {
-    config: GuardrailsConfig;
-    error?: Error;
-};
-export declare function writeExactAllowRule(command: string, path?: string): PatternConfig;
-export declare function testPattern(pattern: PatternConfig, command: string): boolean;
-export declare function findPattern(command: string, patterns: PatternConfig[]): PatternConfig | undefined;

package/dist/config.js

@@ -1,106 +0,0 @@
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
-export const BUILTIN_PATTERNS = [
-    { pattern: "rm -rf", description: "recursive force delete" },
-    { pattern: "sudo", description: "superuser command" },
-    { pattern: "dd of=", description: "disk write operation" },
-    { pattern: "mkfs.", description: "filesystem format" },
-    { pattern: "chmod -R 777", description: "insecure recursive permissions" },
-    { pattern: "chown -R", description: "recursive ownership change" },
-    { pattern: "doas", description: "privileged command execution" },
-    { pattern: "pkexec", description: "privileged command execution" },
-    { pattern: "shred", description: "secure file overwrite" },
-    { pattern: "wipefs", description: "filesystem signature wipe" },
-    { pattern: "blkdiscard", description: "block device discard" },
-    { pattern: "fdisk", description: "disk partitioning" },
-    { pattern: "parted", description: "disk partitioning" },
-    { pattern: "docker run --privileged", description: "container with privileged mode" },
-];
-export function getConfigPath() {
-    return join(homedir(), ".pi", "agent", "extensions", "guardrails.json");
-}
-export function readConfig(path = getConfigPath()) {
-    let content;
-    try {
-        content = readFileSync(path, "utf-8");
-    }
-    catch (error) {
-        if (isNodeError(error) && error.code === "ENOENT")
-            return { config: {} };
-        return { config: {}, error: asError(error) };
-    }
-    try {
-        const parsed = JSON.parse(content);
-        if (!isGuardrailsConfig(parsed))
-            throw new Error("guardrails.json has an invalid structure");
-        return { config: parsed };
-    }
-    catch (error) {
-        return { config: {}, error: asError(error) };
-    }
-}
-export function writeExactAllowRule(command, path = getConfigPath()) {
-    const { config, error } = readConfig(path);
-    if (error)
-        throw new Error(`Cannot update invalid guardrails config: ${error.message}`);
-    const permissionGate = config.permissionGate ?? {};
-    const allowedPatterns = permissionGate.allowedPatterns ?? [];
-    const rule = { pattern: `^${escapeRegex(command)}$`, regex: true };
-    if (!allowedPatterns.some((item) => item.pattern === rule.pattern && item.regex === true)) {
-        allowedPatterns.push(rule);
-    }
-    config.permissionGate = { ...permissionGate, allowedPatterns };
-    mkdirSync(dirname(path), { recursive: true });
-    writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, "utf-8");
-    return rule;
-}
-export function testPattern(pattern, command) {
-    if (pattern.regex) {
-        try {
-            return new RegExp(pattern.pattern).test(command);
-        }
-        catch {
-            return false;
-        }
-    }
-    return command.includes(pattern.pattern);
-}
-export function findPattern(command, patterns) {
-    return patterns.find((pattern) => testPattern(pattern, command));
-}
-function escapeRegex(value) {
-    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-function isGuardrailsConfig(value) {
-    if (!isRecord(value))
-        return false;
-    if (value.applyBuiltinDefaults !== undefined && typeof value.applyBuiltinDefaults !== "boolean")
-        return false;
-    if (value.permissionGate === undefined)
-        return true;
-    if (!isRecord(value.permissionGate))
-        return false;
-    return isPatternList(value.permissionGate.patterns) && isPatternList(value.permissionGate.allowedPatterns);
-}
-function isPatternList(value) {
-    if (value === undefined)
-        return true;
-    return Array.isArray(value) && value.every(isPatternConfig);
-}
-function isPatternConfig(value) {
-    return (isRecord(value) &&
-        typeof value.pattern === "string" &&
-        (value.regex === undefined || typeof value.regex === "boolean") &&
-        (value.description === undefined || typeof value.description === "string"));
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isNodeError(error) {
-    return error instanceof Error && "code" in error;
-}
-function asError(error) {
-    return error instanceof Error ? error : new Error(String(error));
-}
-//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAgB1C,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAC5D,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACrD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC1D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACtD,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,gCAAgC,EAAE;IAC1E,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,4BAA4B,EAAE;IAClE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAChE,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;IAClE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC1D,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAC/D,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC9D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACtD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACvD,EAAE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,gCAAgC,EAAE;CACtF,CAAC;AAEF,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAI,GAAG,aAAa,EAAE;IAC/C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC7F,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,IAAI,GAAG,aAAa,EAAE;IACzE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAExF,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC;IACnD,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,IAAI,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAClF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1F,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,cAAc,GAAG,EAAE,GAAG,cAAc,EAAE,eAAe,EAAE,CAAC;IAC/D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAsB,EAAE,OAAe;IACjE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,QAAyB;IACpE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9G,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,OAAO,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;AAC7G,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;QAC/D,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/dialog.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dialog.js","sourceRoot":"","sources":["../src/dialog.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,SAAS,EACT,GAAG,EACH,MAAM,EACN,IAAI,EACJ,UAAU,EACV,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAIhC,MAAM,OAAO,GAAoD;IAC/D,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;IAC7C,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,eAAe,EAAE;IACxD,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE;IACnD,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,MAAM,EAAE;CAC/D,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAOjC,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,WAAmB;IAC/D,OAAO,CACL,GAA2E,EAC3E,KAAmB,EACnB,GAAY,EACZ,IAAqC,EACrC,EAAE;QACF,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,mBAAmB,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1D,SAAS,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACjD,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnG,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,0BAA0B,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACrC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACxC,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,yBAAyB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,UAAU,IAAI,WAAW;YAAE,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrE,SAAS,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,CAChB,IAAI,IAAI,CACN,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,+DAA+D,CAAC,EAChF,CAAC,EACD,CAAC,CACF,CACF,CAAC;QACF,SAAS,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAEjD,MAAM,WAAW,GAAG,CAAC,YAAoB,EAAE,EAAE;YAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;gBACvD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;gBACpF,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAC9D,OAAO,EAAE,KAAK,GAAG,CAAC;oBAClB,QAAQ;iBACT,CAAC,CAAC,CAAC;YACN,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACvE,OAAO;gBACL,MAAM;gBACN,UAAU;gBACV,UAAU;gBACV,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,UAAU,CAAC;aACvD,CAAC;QACJ,CAAC,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC5C,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;gBAChF,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC9D,MAAM,iBAAiB,GAAG,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,UAAU,CAAC,CAAC;gBACpF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,iBAAiB,CAAC,CAAC;gBAClD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;gBAE9F,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE;oBACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBACrC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBAC/E,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;gBACtF,CAAC,CAAC;gBAEF,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACvF,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACnE,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAEtF,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;oBACxD,MAAM,KAAK,GAAG,GAAG,KAAK,GAAG,CAAC,KAAK,OAAO,CAAC,KAAK,CAAE,CAAC,KAAK,EAAE,CAAC;oBACvD,UAAU,CAAC,OAAO,CAChB,KAAK,KAAK,aAAa;wBACrB,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE;wBACrE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,EAAE,CAAC,CAClC,CAAC;gBACJ,CAAC;gBAED,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE;YACxC,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE;gBAC5B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;gBAC3D,MAAM,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;gBAEhD,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,aAAa,GAAG,CAAC,aAAa,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;oBACtE,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,aAAa,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;oBACrD,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;oBAC7C,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;oBACrD,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,CAAC;qBAAM,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAE,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,eAAe,CAAC,CAAC;gBACxB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,eAAe,CAAC,CAAC;gBACxB,CAAC;qBAAM,IAAI,IAAI,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;oBACxF,IAAI,CAAC,MAAM,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/rules.d.ts

@@ -1,6 +0,0 @@
-export interface AutoDenyRule {
-    pattern: string;
-    reason: string;
-}
-export declare const AUTO_DENY_PATTERNS: AutoDenyRule[];
-export declare function findAutoDenyMatch(command: string): AutoDenyRule | undefined;

package/dist/rules.js

@@ -1,16 +0,0 @@
-export const AUTO_DENY_PATTERNS = [
-    { pattern: "az group delete", reason: "deletes an entire Azure resource group and all its resources" },
-    { pattern: "az subscription cancel", reason: "cancels the entire Azure subscription" },
-    { pattern: "az account management-group delete", reason: "deletes Azure management group hierarchy" },
-    { pattern: "az ad user delete", reason: "deletes an Azure AD user" },
-    { pattern: "az ad group delete", reason: "deletes an Azure AD security group" },
-    { pattern: "az lock delete", reason: "removes an Azure resource lock (enables further destruction)" },
-    { pattern: "az keyvault purge", reason: "permanently purges a Key Vault, bypassing soft-delete" },
-    { pattern: "kubectl delete namespace", reason: "deletes a Kubernetes namespace and all resources inside" },
-    { pattern: "kubectl delete --all", reason: "deletes all Kubernetes resources of a type" },
-    { pattern: "kubectl drain", reason: "evicts all pods from a Kubernetes node" },
-];
-export function findAutoDenyMatch(command) {
-    return AUTO_DENY_PATTERNS.find((rule) => command.includes(rule.pattern));
-}
-//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,kBAAkB,GAAmB;IAChD,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IACtG,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,uCAAuC,EAAE;IACtF,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,0CAA0C,EAAE;IACrG,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,0BAA0B,EAAE;IACpE,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAC/E,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IACrG,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,uDAAuD,EAAE;IACjG,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,yDAAyD,EAAE;IAC1G,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,4CAA4C,EAAE;IACzF,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,wCAAwC,EAAE;CAC/E,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC"}