@xynogen/pix-gate 0.1.13 → 0.1.15

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@xynogen/pix-gate",
-	"version": "0.1.13",
+	"version": "0.1.15",
 	"description": "Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)",
 	"type": "module",
 	"main": "src/index.ts",
@@ -43,7 +43,7 @@
 	},
 	"dependencies": {
 		"@xynogen/pix-pretty": "^1.7.9",
-		"@xynogen/pix-data": "workspace:*"
+		"@xynogen/pix-data": "^0.3.0"
 	},
 	"peerDependencies": {
 		"@earendil-works/pi-coding-agent": "*",

package/src/gate.test.ts

@@ -25,11 +25,9 @@ describe("isSudoCommand", () => {
 	});
 
 	test("does NOT match pix-sudo-run in a path", () => {
-		expect(
-			isSudoCommand(
-				"grep foo ~/.pi/node_modules/@xynogen/pix-sudo-run/src/lib.ts",
-			),
-		).toBe(false);
+		expect(isSudoCommand("grep foo ~/.pi/node_modules/@xynogen/pix-sudo-run/src/lib.ts")).toBe(
+			false,
+		);
 	});
 
 	test("does NOT match sudoer or pseudo", () => {
@@ -64,15 +62,11 @@ describe("classify", () => {
 	});
 
 	test("bare sudo is dangerous", () => {
-		expect(classify("sudo apt install curl", rules)?.severity).toBe(
-			"dangerous",
-		);
+		expect(classify("sudo apt install curl", rules)?.severity).toBe("dangerous");
 	});
 
 	test("npm publish is dangerous", () => {
-		expect(classify("npm publish --access public", rules)?.severity).toBe(
-			"dangerous",
-		);
+		expect(classify("npm publish --access public", rules)?.severity).toBe("dangerous");
 	});
 
 	test("git force push is dangerous", () => {
@@ -80,15 +74,13 @@ describe("classify", () => {
 	});
 
 	test("curl pipe bash is dangerous", () => {
-		expect(
-			classify("curl https://example.com/install.sh | bash", rules)?.severity,
-		).toBe("dangerous");
+		expect(classify("curl https://example.com/install.sh | bash", rules)?.severity).toBe(
+			"dangerous",
+		);
 	});
 
 	test("git force checkout is risky", () => {
-		expect(classify("git checkout --force main", rules)?.severity).toBe(
-			"risky",
-		);
+		expect(classify("git checkout --force main", rules)?.severity).toBe("risky");
 	});
 
 	test("write to .env is risky", () => {
@@ -101,9 +93,7 @@ describe("classify", () => {
 
 	test("pix-sudo path does NOT classify as dangerous", () => {
 		// grep with pix-sudo in the path — should not hit sudo rule
-		expect(
-			classify("grep foo packages/pix-sudo/src/index.ts", rules),
-		).toBeUndefined();
+		expect(classify("grep foo packages/pix-sudo/src/index.ts", rules)).toBeUndefined();
 	});
 
 	test("critical takes priority over dangerous", () => {

package/src/index.ts

@@ -65,10 +65,7 @@ export default function (pi: ExtensionAPI): void {
 		if (!hit) return undefined;
 
 		if (hit.severity === "info") {
-			ctx.ui.notify(
-				`${PATH_SEVERITY_ICON.info} ${hit.reason}: ${path}`,
-				"info",
-			);
+			ctx.ui.notify(`${PATH_SEVERITY_ICON.info} ${hit.reason}: ${path}`, "info");
 			return undefined;
 		}
 
@@ -187,10 +184,7 @@ export default function (pi: ExtensionAPI): void {
 		}
 
 		if (!decision.approved) {
-			ctx.ui.notify(
-				`${highest.icon} ${decision.reason}: ${highest.detail}`,
-				"warning",
-			);
+			ctx.ui.notify(`${highest.icon} ${decision.reason}: ${highest.detail}`, "warning");
 			return { block: true, reason: `[${highest.label}] ${decision.reason}` };
 		}
 
@@ -202,10 +196,7 @@ export default function (pi: ExtensionAPI): void {
 					: "accent";
 		ctx.ui.notify(
 			`${highest.icon} ` +
-				ctx.ui.theme.fg(
-					severityColor,
-					`Approved ${highest.label.toLowerCase()} command`,
-				),
+				ctx.ui.theme.fg(severityColor, `Approved ${highest.label.toLowerCase()} command`),
 			"info",
 		);
 		return undefined;

package/src/lib.ts

@@ -32,8 +32,7 @@ export const DEFAULT_RULES: Rule[] = [
 		reason: "rm -rf on /",
 	},
 	{
-		pattern:
-			/\brm\s+(-[a-z]*r[a-z]*f|-[a-z]*f[a-z]*r)\s+(~|\$HOME)(\s|$|\/\s*$)/i,
+		pattern: /\brm\s+(-[a-z]*r[a-z]*f|-[a-z]*f[a-z]*r)\s+(~|\$HOME)(\s|$|\/\s*$)/i,
 		severity: "critical",
 		reason: "rm -rf on $HOME",
 	},
@@ -171,9 +170,7 @@ export function buildRules(cfg: UserConfig): {
 export function classify(command: string, rules: Rule[]): Rule | undefined {
 	const order: Severity[] = ["critical", "dangerous", "risky"];
 	for (const sev of order) {
-		const hit = rules.find(
-			(r) => r.severity === sev && r.pattern.test(command),
-		);
+		const hit = rules.find((r) => r.severity === sev && r.pattern.test(command));
 		if (hit) return hit;
 	}
 	return undefined;

package/src/prompt.ts

@@ -6,10 +6,7 @@
  */
 
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
-import {
-	type OverlayResult,
-	showOverlay,
-} from "@xynogen/pix-pretty/gate-overlay";
+import { type OverlayResult, showOverlay } from "@xynogen/pix-pretty/gate-overlay";
 import type { PathRule, Rule } from "./lib.ts";
 
 export interface GateDecision {
@@ -106,22 +103,17 @@ export async function promptPathDecision(
 					},
 				];
 
-	const result: OverlayResult = await showOverlay(
-		ui as Parameters<typeof showOverlay>[0],
-		{
-			mode: "confirm",
-			title: `${icon} ${label} — ${hit.reason}`,
-			body: [`${op.toUpperCase()} ${path}`],
-			accent,
-			timeoutMs: PATH_TIMEOUT_MS[hit.severity],
-			choices,
-		},
-	);
+	const result: OverlayResult = await showOverlay(ui as Parameters<typeof showOverlay>[0], {
+		mode: "confirm",
+		title: `${icon} ${label} — ${hit.reason}`,
+		body: [`${op.toUpperCase()} ${path}`],
+		accent,
+		timeoutMs: PATH_TIMEOUT_MS[hit.severity],
+		choices,
+	});
 
-	if (result.action === "approved")
-		return { approved: true, reason: "Approved" };
-	if (result.action === "timeout")
-		return { approved: false, reason: "Timed out" };
+	if (result.action === "approved") return { approved: true, reason: "Approved" };
+	if (result.action === "timeout") return { approved: false, reason: "Timed out" };
 	return { approved: false, reason: "Blocked by user" };
 }
 
@@ -152,8 +144,7 @@ export async function promptMergedGateDecision(
 	// Sort by tier desc so the highest-severity concern drives dialog behavior.
 	const sorted = [...concerns].sort((a, b) => b.tier - a.tier);
 	const highest = sorted[0];
-	if (!highest)
-		throw new Error("promptMergedGateDecision requires at least one concern");
+	if (!highest) throw new Error("promptMergedGateDecision requires at least one concern");
 	const isRestrictive = highest.tier >= SEVERITY_TIER.block; // block or critical
 
 	// Title: unique severity types, joined with " + "
@@ -166,16 +157,11 @@ export async function promptMergedGateDecision(
 			uniqueLabels.push(key);
 		}
 	}
-	const titleSuffix =
-		command.length > 55 ? `${command.slice(0, 52)}…` : command;
+	const titleSuffix = command.length > 55 ? `${command.slice(0, 52)}…` : command;
 	const title = `${uniqueLabels.join(" + ")} — ${titleSuffix}`;
 
 	// Body: command + concern list
-	const body = [
-		command,
-		"",
-		...sorted.map((c) => `${c.icon} ${c.label} — ${c.detail}`),
-	];
+	const body = [command, "", ...sorted.map((c) => `${c.icon} ${c.label} — ${c.detail}`)];
 
 	const accent =
 		highest.tier >= SEVERITY_TIER.critical
@@ -215,15 +201,17 @@ export async function promptMergedGateDecision(
 				},
 			];
 
-	const result: OverlayResult = await showOverlay(
-		ui as Parameters<typeof showOverlay>[0],
-		{ mode: "confirm", title, body, accent, timeoutMs, choices },
-	);
+	const result: OverlayResult = await showOverlay(ui as Parameters<typeof showOverlay>[0], {
+		mode: "confirm",
+		title,
+		body,
+		accent,
+		timeoutMs,
+		choices,
+	});
 
-	if (result.action === "approved")
-		return { approved: true, reason: "Approved" };
-	if (result.action === "timeout")
-		return { approved: false, reason: "Timed out" };
+	if (result.action === "approved") return { approved: true, reason: "Approved" };
+	if (result.action === "timeout") return { approved: false, reason: "Timed out" };
 	return { approved: false, reason: "Blocked by user" };
 }
 
@@ -270,21 +258,16 @@ export async function promptGateDecision(
 					},
 				];
 
-	const result: OverlayResult = await showOverlay(
-		ui as Parameters<typeof showOverlay>[0],
-		{
-			mode: "confirm",
-			title: `${icon} ${label} — ${hit.reason}`,
-			body: [command],
-			accent,
-			timeoutMs: TIMEOUT_MS[hit.severity],
-			choices,
-		},
-	);
+	const result: OverlayResult = await showOverlay(ui as Parameters<typeof showOverlay>[0], {
+		mode: "confirm",
+		title: `${icon} ${label} — ${hit.reason}`,
+		body: [command],
+		accent,
+		timeoutMs: TIMEOUT_MS[hit.severity],
+		choices,
+	});
 
-	if (result.action === "approved")
-		return { approved: true, reason: "Approved" };
-	if (result.action === "timeout")
-		return { approved: false, reason: "Timed out" };
+	if (result.action === "approved") return { approved: true, reason: "Approved" };
+	if (result.action === "timeout") return { approved: false, reason: "Timed out" };
 	return { approved: false, reason: "Blocked by user" };
 }