@xynogen/pix-gate 0.1.16 → 0.2.0

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@xynogen/pix-gate",
-	"version": "0.1.16",
+	"version": "0.2.0",
 	"description": "Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)",
 	"type": "module",
 	"main": "src/index.ts",
@@ -44,7 +44,7 @@
 	"dependencies": {
 		"@xynogen/pix-pretty": "^1.7.9",
 		"@xynogen/pix-data": "^0.4.0",
-		"@xynogen/pix-runtime": "^0.2.0"
+		"@xynogen/pix-runtime": "^0.3.0"
 	},
 	"peerDependencies": {
 		"@earendil-works/pi-coding-agent": "*",

package/src/gate.test.ts

@@ -105,14 +105,14 @@ describe("classify", () => {
 // ── buildRules ────────────────────────────────────────────────────────────────
 
 describe("buildRules", () => {
-	test("disableDefaults removes all built-in rules", () => {
-		const { rules } = buildRules({ disableDefaults: true });
+	test("guardrails off removes all built-in rules", () => {
+		const { rules } = buildRules({ guardrails: "off" });
 		expect(rules).toHaveLength(0);
 	});
 
-	test("extraRules are appended", () => {
+	test("extraRules are appended when guardrails are off", () => {
 		const { rules } = buildRules({
-			disableDefaults: true,
+			guardrails: "off",
 			extraRules: [{ pattern: "foo", severity: "risky", reason: "test" }],
 		});
 		expect(rules).toHaveLength(1);
@@ -126,7 +126,7 @@ describe("buildRules", () => {
 		expect(rule0.test("yarn publish")).toBe(false);
 	});
 
-	test("defaults included when disableDefaults absent", () => {
+	test("defaults included when guardrails is absent", () => {
 		const { rules } = buildRules({});
 		expect(rules.length).toBe(DEFAULT_RULES.length);
 	});

package/src/index.ts

@@ -11,8 +11,8 @@
  *   sudo      — hard block, must use sudo_run tool instead (no bypass)
  *   No-UI fallback: critical/dangerous auto-block (can't show dialog)
  *
- * Config: ~/.pi/agent/pix-gate.json
- *   disableDefaults: true          — replace built-in rules entirely
+ * Config: ~/.pi/agent/pix.json (the `gate` section)
+ *   guardrails: "off"              — disable built-in rules entirely
  *   extraRules: [{ pattern, flags?, severity?, reason? }]  — append extra rules
  *   autoApprove: ["regex"]         — bypass gate for matching commands
  */

package/src/lib.ts

@@ -20,7 +20,8 @@ export interface UserConfig {
 		severity?: Severity;
 		reason?: string;
 	}[];
-	disableDefaults?: boolean;
+	/** Whether Pix's built-in command protections are active. Defaults to "on". */
+	guardrails?: "on" | "off";
 	/** Regex strings — commands matching any are passed through without prompting. */
 	autoApprove?: string[];
 }
@@ -133,7 +134,7 @@ export function loadUserConfig(): UserConfig {
 	// Read from ~/.pi/agent/pix.json gate section
 	const pix = config(gateSection);
 	return {
-		disableDefaults: pix.disableDefaults || undefined,
+		guardrails: pix.guardrails,
 		autoApprove: pix.autoApprove.length > 0 ? pix.autoApprove : undefined,
 		extraRules:
 			pix.extraRules.length > 0
@@ -152,7 +153,7 @@ export function buildRules(cfg: UserConfig): {
 	autoApprove: RegExp[];
 	pathRules: PathRule[];
 } {
-	const base = cfg.disableDefaults ? [] : DEFAULT_RULES.slice();
+	const base = cfg.guardrails === "off" ? [] : DEFAULT_RULES.slice();
 	const extra = (cfg.extraRules ?? []).map((r) => ({
 		pattern: new RegExp(r.pattern, r.flags ?? "i"),
 		severity: (r.severity ?? "dangerous") as Severity,
@@ -160,7 +161,7 @@ export function buildRules(cfg: UserConfig): {
 	}));
 	const autoApprove = (cfg.autoApprove ?? []).map((s) => new RegExp(s));
 	// ponytail: path rule config extension skipped for now — add extraPathRules/disablePathDefaults to UserConfig when needed
-	const pathRules = cfg.disableDefaults ? [] : DEFAULT_PATH_RULES.slice();
+	const pathRules = cfg.guardrails === "off" ? [] : DEFAULT_PATH_RULES.slice();
 	return { rules: [...base, ...extra], autoApprove, pathRules };
 }