@xynogen/pix-gate 0.1.9 → 0.1.12

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@xynogen/pix-gate",
-	"version": "0.1.9",
+	"version": "0.1.12",
 	"description": "Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)",
 	"type": "module",
 	"main": "src/index.ts",
@@ -42,7 +42,7 @@
 		"access": "public"
 	},
 	"dependencies": {
-		"@xynogen/pix-pretty": "*"
+		"@xynogen/pix-pretty": "^1.7.9"
 	},
 	"peerDependencies": {
 		"@earendil-works/pi-coding-agent": "*",

package/src/gate.test.ts

@@ -131,8 +131,9 @@ describe("buildRules", () => {
 
 	test("autoApprove strings compile to regexes", () => {
 		const { autoApprove } = buildRules({ autoApprove: ["^npm publish"] });
-		expect(autoApprove[0].test("npm publish --access public")).toBe(true);
-		expect(autoApprove[0].test("yarn publish")).toBe(false);
+		const rule0 = autoApprove[0] as RegExp;
+		expect(rule0.test("npm publish --access public")).toBe(true);
+		expect(rule0.test("yarn publish")).toBe(false);
 	});
 
 	test("defaults included when disableDefaults absent", () => {

package/src/index.ts

@@ -88,7 +88,13 @@ export default function (pi: ExtensionAPI): void {
 	});
 
 	// ── Unified bash gate (path + command concerns in ONE dialog) ───────────
-	const SEVERITY_TIER: Record<string, number> = {
+	const SEVERITY_TIER: {
+		critical: number;
+		block: number;
+		dangerous: number;
+		warn: number;
+		risky: number;
+	} = {
 		critical: 5,
 		block: 4,
 		dangerous: 3,

package/src/lib.ts

@@ -276,8 +276,7 @@ export function extractPathsFromBash(cmd: string): string[] {
 	const out: string[] = [];
 	const re =
 		/(?:^|[\s=><|;&"'`(])((?:\.\.\/|\/|~\/|\.)[^\s"'`<>|;&)]+|\.env(?:\.[A-Za-z0-9_-]+)?|[A-Za-z0-9_./-]+\.(?:pem|key|p12|pfx|crt|cer|env|envrc|netrc))/g;
-	let m: RegExpExecArray | null;
-	while ((m = re.exec(cmd)) !== null) out.push(m[1]);
+	for (const m of cmd.matchAll(re)) out.push(m[1] ?? "");
 	return out;
 }
 

package/src/prompt.ts

@@ -126,7 +126,13 @@ export async function promptPathDecision(
 }
 
 /** Tier for dialog behavior — higher = more restrictive (deny-first, shorter timeout). */
-const SEVERITY_TIER: Record<string, number> = {
+const SEVERITY_TIER: {
+	critical: number;
+	block: number;
+	dangerous: number;
+	warn: number;
+	risky: number;
+} = {
 	critical: 5,
 	block: 4,
 	dangerous: 3,
@@ -146,6 +152,8 @@ export async function promptMergedGateDecision(
 	// Sort by tier desc so the highest-severity concern drives dialog behavior.
 	const sorted = [...concerns].sort((a, b) => b.tier - a.tier);
 	const highest = sorted[0];
+	if (!highest)
+		throw new Error("promptMergedGateDecision requires at least one concern");
 	const isRestrictive = highest.tier >= SEVERITY_TIER.block; // block or critical
 
 	// Title: unique severity types, joined with " + "