@vtstech/pi-security 1.0.3

package/package.json

@@ -0,0 +1,24 @@
+{
+  "name": "@vtstech/pi-security",
+  "version": "1.0.3",
+  "description": "Security extension for Pi Coding Agent",
+  "main": "security.js",
+  "keywords": ["pi-package", "pi-extensions"],
+  "license": "MIT",
+  "access": "public",
+  "author": "VTSTech",
+  "homepage": "https://www.vts-tech.org",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/VTSTech/pi-coding-agent"
+  },
+  "dependencies": {
+    "@vtstech/pi-shared": "1.0.3"
+  },
+  "peerDependencies": {
+    "@mariozechner/pi-coding-agent": ">=0.66"
+  },
+  "pi": {
+    "extensions": ["./security.js"]
+  }
+}

package/security.js

@@ -0,0 +1,233 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// .build-npm/security/security.temp.ts
+var security_temp_exports = {};
+__export(security_temp_exports, {
+  default: () => security_temp_default
+});
+module.exports = __toCommonJS(security_temp_exports);
+var import_security = require("@vtstech/pi-shared/security");
+var import_format = require("@vtstech/pi-shared/format");
+function security_temp_default(pi) {
+  const stats = {
+    blocked: 0,
+    allowed: 0,
+    warnings: 0,
+    byRule: {}
+  };
+  const branding = [
+    `  \u26A1 Pi Security Extension v1.0.3`,
+    `  Written by VTSTech`,
+    `  GitHub: https://github.com/VTSTech`,
+    `  Website: www.vts-tech.org`
+  ].join("\n");
+  pi.on("tool_call", (event) => {
+    const toolName = event.toolName;
+    const input = event.input ?? {};
+    const toolCallId = event.toolCallId;
+    let result;
+    switch (toolName) {
+      case "bash":
+      case "shell":
+      case "run_command":
+        result = (0, import_security.checkBashToolInput)(input);
+        break;
+      case "read":
+      case "read_file":
+      case "write":
+      case "write_file":
+      case "edit":
+      case "edit_file":
+      case "list_directory":
+      case "list_dir":
+        result = (0, import_security.checkFileToolInput)(input);
+        break;
+      case "http_get":
+      case "http_post":
+      case "fetch":
+      case "web_search":
+      case "http_request":
+        result = (0, import_security.checkHttpToolInput)(input);
+        break;
+      default:
+        result = (0, import_security.checkInjectionPatterns)(input);
+        break;
+    }
+    if (!result.safe) {
+      stats.blocked++;
+      stats.byRule[result.rule] = (stats.byRule[result.rule] || 0) + 1;
+      stats.lastBlocked = {
+        tool: toolName,
+        rule: result.rule,
+        detail: result.detail,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      };
+      (0, import_security.appendAuditEntry)({
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        toolName,
+        toolCallId,
+        action: "blocked",
+        rule: result.rule,
+        detail: result.detail,
+        input: sanitizeInputForLog(input)
+      });
+      return {
+        block: true,
+        reason: `[SECURITY] ${result.detail} (rule: ${result.rule})`
+      };
+    }
+    stats.allowed++;
+    if (["bash", "shell", "write", "write_file", "edit", "edit_file"].includes(toolName)) {
+      stats.warnings++;
+      (0, import_security.appendAuditEntry)({
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        toolName,
+        toolCallId,
+        action: "allowed",
+        rule: result.rule || "none",
+        detail: "Dangerous tool executed",
+        input: sanitizeInputForLog(input)
+      });
+    }
+  });
+  pi.on("tool_result", (event) => {
+    const toolName = event.toolName;
+    const isError = event.isError;
+    if (isError) {
+      (0, import_security.appendAuditEntry)({
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        toolName,
+        toolCallId: event.toolCallId,
+        action: "warning",
+        rule: "tool_error",
+        detail: "Tool execution failed",
+        input: sanitizeInputForLog(event.input)
+      });
+    }
+  });
+  async function generateAuditReport() {
+    const lines = [];
+    lines.push(branding);
+    lines.push((0, import_format.section)("SESSION STATISTICS"));
+    lines.push((0, import_format.info)(`Tool calls allowed: ${stats.allowed}`));
+    lines.push((0, import_format.info)(`Tool calls blocked: ${stats.blocked}`));
+    lines.push((0, import_format.info)(`Dangerous operations logged: ${stats.warnings}`));
+    if (stats.blocked > 0) {
+      lines.push((0, import_format.warn)(`${stats.blocked} operation(s) were blocked by security rules`));
+    }
+    const ruleNames = Object.keys(stats.byRule);
+    if (ruleNames.length > 0) {
+      lines.push((0, import_format.section)("BLOCKED BY RULE"));
+      for (const rule of ruleNames) {
+        lines.push((0, import_format.info)(`  ${rule}: ${stats.byRule[rule]} blocked`));
+      }
+    }
+    if (stats.lastBlocked) {
+      lines.push((0, import_format.section)("LAST BLOCKED"));
+      lines.push((0, import_format.fail)(`Tool: ${stats.lastBlocked.tool}`));
+      lines.push((0, import_format.fail)(`Rule: ${stats.lastBlocked.rule}`));
+      lines.push((0, import_format.fail)(`Detail: ${stats.lastBlocked.detail}`));
+      lines.push((0, import_format.info)(`Time: ${stats.lastBlocked.timestamp}`));
+    }
+    lines.push((0, import_format.section)("SECURITY CONFIGURATION"));
+    lines.push((0, import_format.info)(`Blocked commands: ${import_security.BLOCKED_COMMANDS.size}`));
+    lines.push((0, import_format.info)(`Blocked URL patterns: ${import_security.BLOCKED_URL_PATTERNS.size}`));
+    lines.push((0, import_format.info)(`Active checks: command_blocklist, path_validation, ssrf_protection, injection_detection`));
+    const recentEntries = (0, import_security.readRecentAuditEntries)(20);
+    if (recentEntries.length > 0) {
+      lines.push((0, import_format.section)("RECENT AUDIT LOG (last 20)"));
+      for (const entry of recentEntries) {
+        const ts = entry.timestamp || "?";
+        const action = entry.action;
+        const tool = entry.toolName;
+        const rule = entry.rule;
+        const detail = entry.detail;
+        if (action === "blocked") {
+          lines.push((0, import_format.fail)(`[${ts}] ${tool} \u2192 BLOCKED (${rule}): ${detail}`));
+        } else if (action === "warning") {
+          lines.push((0, import_format.warn)(`[${ts}] ${tool} \u2192 WARNING (${rule}): ${detail}`));
+        } else {
+          lines.push((0, import_format.ok)(`[${ts}] ${tool} \u2192 allowed (${rule})`));
+        }
+      }
+    }
+    lines.push((0, import_format.section)("SUMMARY"));
+    if (stats.blocked === 0) {
+      lines.push((0, import_format.ok)("No security violations detected in this session"));
+    } else {
+      lines.push((0, import_format.fail)(`${stats.blocked} security violation(s) blocked`));
+    }
+    lines.push(branding);
+    return lines.join("\n");
+  }
+  pi.registerCommand("security-audit", {
+    description: "Show security audit report \u2014 blocked operations, stats, and recent log",
+    handler: async (_args, ctx) => {
+      if (!ctx.hasUI) {
+        ctx.ui.notify("Security audit requires TUI mode", "error");
+        return;
+      }
+      try {
+        const report = await generateAuditReport();
+        pi.sendMessage({
+          customType: "security-audit-report",
+          content: report,
+          display: { type: "content", content: report }
+        });
+      } catch (e) {
+        ctx.ui.notify(`Security audit failed: ${e.message}`, "error");
+      }
+    }
+  });
+  pi.registerTool({
+    name: "security_audit",
+    label: "Security Audit",
+    description: "Run a security audit showing blocked operations, security statistics, and recent audit log entries. Use this when the user asks about security status or wants to review security events.",
+    promptSnippet: "security_audit - show security status and blocked operations",
+    promptGuidelines: [
+      "When the user asks about security, blocked operations, or audit log, call security_audit."
+    ],
+    parameters: {},
+    execute: async (_toolCallId, _params, _signal, _onUpdate, _ctx) => {
+      try {
+        const report = await generateAuditReport();
+        return {
+          content: [{ type: "text", text: report }],
+          isError: false
+        };
+      } catch (e) {
+        return {
+          content: [{ type: "text", text: `Security audit failed: ${e.message}` }],
+          isError: true
+        };
+      }
+    }
+  });
+}
+function sanitizeInputForLog(input) {
+  const sanitized = {};
+  for (const [key, value] of Object.entries(input)) {
+    if (typeof value === "string" && value.length > 500) {
+      sanitized[key] = value.slice(0, 500) + "... (truncated)";
+    } else {
+      sanitized[key] = value;
+    }
+  }
+  return sanitized;
+}