@spences10/pi-svelte-guardrails 0.0.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Scott Spence
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,16 @@
+# @spences10/pi-svelte-guardrails
+
+Pi extension that blocks agents from writing discouraged Svelte
+patterns.
+
+Currently blocks `$effect` in `.svelte` `write`/`edit` tool calls and
+tells the agent to prefer `$derived`, event handlers, actions, or
+explicit lifecycle alternatives.
+
+```bash
+pi install npm:@spences10/pi-svelte-guardrails
+```
+
+This is opt-in: installing the package globally applies it to your Pi
+sessions, but projects and downstream users do not inherit it unless
+they install the package.

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+import type { ExtensionAPI, ToolCallEvent } from '@earendil-works/pi-coding-agent';
+export declare function is_svelte_path(value: unknown): boolean;
+export declare function contains_disallowed_effect(value: unknown): boolean;
+export declare function find_svelte_path(input: Record<string, unknown>): string | undefined;
+export declare function extract_bash_svelte_path(command: string): string | undefined;
+export declare function should_block_svelte_effect(event: ToolCallEvent): string | undefined;
+export default function svelte_guardrails(pi: ExtensionAPI): void;

package/dist/index.js

@@ -0,0 +1,71 @@
+// Svelte guardrails for Pi agents.
+const SVELTE_FILE_RE = /\.svelte(?:\.|$|\?)/;
+const EFFECT_RE = /\$effect(?:\s*\(|\s*\.)/;
+export function is_svelte_path(value) {
+    return typeof value === 'string' && SVELTE_FILE_RE.test(value);
+}
+export function contains_disallowed_effect(value) {
+    return typeof value === 'string' && EFFECT_RE.test(value);
+}
+export function find_svelte_path(input) {
+    for (const key of ['path', 'file_path', 'filePath']) {
+        const value = input[key];
+        if (typeof value === 'string' && is_svelte_path(value))
+            return value;
+    }
+    return undefined;
+}
+function input_strings(value) {
+    if (typeof value === 'string')
+        return [value];
+    if (Array.isArray(value))
+        return value.flatMap(input_strings);
+    if (!value || typeof value !== 'object')
+        return [];
+    return Object.values(value).flatMap(input_strings);
+}
+export function extract_bash_svelte_path(command) {
+    const redirect_match = command.match(/>\s*['"]?([^'"\s>]+\.svelte)['"]?\b/);
+    if (redirect_match?.[1])
+        return redirect_match[1];
+    const tee_match = command.match(/\btee\b[^;&|]*\s+['"]?([^'"\s]+\.svelte)['"]?\b/);
+    if (tee_match?.[1])
+        return tee_match[1];
+    const heredoc_match = command.match(/\bcat\b[^;&|]*>\s*['"]?([^'"\s>]+\.svelte)['"]?\b/);
+    return heredoc_match?.[1];
+}
+function block_reason(path) {
+    return `Blocked by Svelte guardrails: ${path} was not created or modified. Do not investigate this guardrail. Complete the user's request by rewriting the example without $effect; use $derived, event handlers, actions, or lifecycle APIs instead. Do not report success until a replacement file is actually written.`;
+}
+export function should_block_svelte_effect(event) {
+    const input = event.input;
+    if (['write', 'edit'].includes(event.toolName)) {
+        const path = find_svelte_path(input);
+        if (!path)
+            return undefined;
+        if (!input_strings(input).some(contains_disallowed_effect))
+            return undefined;
+        return block_reason(path);
+    }
+    if (event.toolName === 'bash') {
+        const command = input.command;
+        if (!contains_disallowed_effect(command))
+            return undefined;
+        if (typeof command !== 'string')
+            return undefined;
+        const path = extract_bash_svelte_path(command);
+        if (!path)
+            return undefined;
+        return block_reason(path);
+    }
+    return undefined;
+}
+export default function svelte_guardrails(pi) {
+    pi.on('tool_call', async (event) => {
+        const reason = should_block_svelte_effect(event);
+        if (!reason)
+            return undefined;
+        return { block: true, reason };
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mCAAmC;AAQnC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAC7C,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAE5C,MAAM,UAAU,cAAc,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC/B,KAA8B;IAE9B,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC;YACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,OAAO,CAC7D,aAAa,CACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,OAAe;IAEf,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CACnC,qCAAqC,CACrC,CAAC;IACF,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IAElD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAC9B,iDAAiD,CACjD,CAAC;IACF,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAExC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAClC,mDAAmD,CACnD,CAAC;IACF,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IACjC,OAAO,iCAAiC,IAAI,8QAA8Q,CAAC;AAC5T,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,KAAoB;IAEpB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAgC,CAAC;IAErD,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC;YACzD,OAAO,SAAS,CAAC;QAClB,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,EAAgB;IACzD,EAAE,CAAC,EAAE,CACJ,WAAW,EACX,KAAK,EAAE,KAAK,EAA4C,EAAE;QACzD,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC,CACD,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@spences10/pi-svelte-guardrails",
+  "version": "0.0.2",
+  "description": "Pi extension that blocks discouraged Svelte patterns before agents write them",
+  "keywords": [
+    "agent-guardrails",
+    "pi",
+    "pi-package",
+    "svelte",
+    "svelte5"
+  ],
+  "license": "MIT",
+  "author": "Scott Spence <me@scottspence.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/spences10/my-pi.git",
+    "directory": "packages/pi-svelte-guardrails"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@earendil-works/pi-coding-agent": "^0.74.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.1",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.5"
+  },
+  "engines": {
+    "node": ">=24.15.0"
+  },
+  "pi": {
+    "extensions": [
+      "./dist/index.js"
+    ]
+  },
+  "scripts": {
+    "build": "pnpm --filter \"$npm_package_name^...\" run build:self && pnpm run build:self",
+    "build:self": "tsc -p tsconfig.build.json",
+    "check": "pnpm --filter \"$npm_package_name^...\" run build:self && pnpm run check:self",
+    "check:self": "tsc --noEmit -p tsconfig.json",
+    "test": "pnpm --filter \"$npm_package_name^...\" run build:self && pnpm run test:self",
+    "test:self": "vitest run",
+    "test:watch": "vitest"
+  }
+}