@xynogen/pix-gate 0.2.8 → 0.2.10

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@xynogen/pix-gate",
-	"version": "0.2.8",
+	"version": "0.2.10",
 	"description": "Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)",
 	"type": "module",
 	"main": "src/index.ts",
@@ -43,8 +43,7 @@
 	},
 	"dependencies": {
 		"@xynogen/pix-pretty": "^1.11.2",
-		"@xynogen/pix-data": "^0.4.3",
-		"@xynogen/pix-runtime": "^0.6.0"
+		"@xynogen/pix-runtime": "^0.8.0"
 	},
 	"peerDependencies": {
 		"@earendil-works/pi-coding-agent": "*",

package/src/gate.test.ts

@@ -1,7 +1,11 @@
 import { describe, expect, test } from "bun:test";
+import { createEventBus } from "@earendil-works/pi-coding-agent";
+import { setUnattendedMode } from "@xynogen/pix-runtime";
 import {
 	buildRules,
 	classify,
+	classifyPath,
+	DEFAULT_PATH_RULES,
 	DEFAULT_RULES,
 	extractPathsFromBash,
 	isCircuitBreaker,
@@ -9,6 +13,23 @@ import {
 	unattendedGateDecision,
 } from "./lib.ts";
 
+// ── .env path gating ─────────────────────────────────────────────
+describe("classifyPath .env", () => {
+	const blocked = [".env", ".env.local", ".env.production", "path/to/.env", "src/.env.staging"];
+	const allowed = [".env.example", ".env.sample", ".env.template", ".env.dist"];
+
+	for (const p of blocked) {
+		test(`reading ${p} is blocked`, () => {
+			expect(classifyPath(p, "read", DEFAULT_PATH_RULES)?.severity).toBe("block");
+		});
+	}
+	for (const p of allowed) {
+		test(`reading ${p} is not blocked`, () => {
+			expect(classifyPath(p, "read", DEFAULT_PATH_RULES)).toBeUndefined();
+		});
+	}
+});
+
 // ── isSudoCommand ─────────────────────────────────────────────────────────────
 
 describe("isSudoCommand", () => {
@@ -47,43 +68,26 @@ describe("isSudoCommand", () => {
 // ── AFK behavior ──────────────────────────────────────────────────────────────
 
 describe("unattendedGateDecision", () => {
-	type G = { __pixAfk?: boolean; __pixYolo?: boolean };
-	const reset = () => {
-		delete (globalThis as G).__pixAfk;
-		delete (globalThis as G).__pixYolo;
-	};
-
 	test("does nothing while every mode is off", () => {
-		reset();
-		expect(unattendedGateDecision(5)).toBeUndefined();
+		expect(unattendedGateDecision(createEventBus(), 5)).toBeUndefined();
 	});
 
 	test("AFK allows yellow concerns and denies red concerns", () => {
-		reset();
-		(globalThis as G).__pixAfk = true;
-		expect(unattendedGateDecision(1)).toBe("allow");
-		expect(unattendedGateDecision(2)).toBe("allow");
-		expect(unattendedGateDecision(3)).toBe("allow");
-		expect(unattendedGateDecision(4)).toBe("deny");
-		expect(unattendedGateDecision(5)).toBe("deny");
-		reset();
+		const events = createEventBus();
+		setUnattendedMode(events, "afk");
+		expect(unattendedGateDecision(events, 1)).toBe("allow");
+		expect(unattendedGateDecision(events, 2)).toBe("allow");
+		expect(unattendedGateDecision(events, 3)).toBe("allow");
+		expect(unattendedGateDecision(events, 4)).toBe("deny");
+		expect(unattendedGateDecision(events, 5)).toBe("deny");
 	});
 
 	test("YOLO allows every tier including red/critical", () => {
-		reset();
-		(globalThis as G).__pixYolo = true;
-		expect(unattendedGateDecision(1)).toBe("allow");
-		expect(unattendedGateDecision(4)).toBe("allow");
-		expect(unattendedGateDecision(5)).toBe("allow");
-		reset();
-	});
-
-	test("YOLO wins when both flags are somehow set", () => {
-		reset();
-		(globalThis as G).__pixAfk = true;
-		(globalThis as G).__pixYolo = true;
-		expect(unattendedGateDecision(5)).toBe("allow");
-		reset();
+		const events = createEventBus();
+		setUnattendedMode(events, "yolo");
+		expect(unattendedGateDecision(events, 1)).toBe("allow");
+		expect(unattendedGateDecision(events, 4)).toBe("allow");
+		expect(unattendedGateDecision(events, 5)).toBe("allow");
 	});
 });
 

package/src/index.ts

@@ -72,7 +72,7 @@ export default function (pi: ExtensionAPI): void {
 			return undefined;
 		}
 
-		const unattended = unattendedGateDecision(hit.severity === "block" ? 4 : 2);
+		const unattended = unattendedGateDecision(pi.events, hit.severity === "block" ? 4 : 2);
 		if (unattended === "allow") return undefined;
 		if (unattended === "deny") {
 			return {
@@ -160,7 +160,7 @@ export default function (pi: ExtensionAPI): void {
 		// sudo: hard redirect — no prompt, no bypass. Even YOLO cannot run bare
 		// `sudo` in bash (the password can't be auto-typed); it must use sudo_run.
 		if (isSudoCommand(command)) {
-			if (unattendedGateDecision(highest.tier) === "deny") {
+			if (unattendedGateDecision(pi.events, highest.tier) === "deny") {
 				return { block: true, reason: "[AFK] sudo is denied while user is away." };
 			}
 			ctx.ui.notify(
@@ -176,13 +176,13 @@ export default function (pi: ExtensionAPI): void {
 		// Circuit breaker: catastrophic commands never auto-approve, even under YOLO.
 		// They fall through to the interactive dialog (or the no-UI block below).
 		const breaker = isCircuitBreaker(command);
-		if (breaker && unattendedGateDecision(highest.tier) === "allow") {
+		if (breaker && unattendedGateDecision(pi.events, highest.tier) === "allow") {
 			ctx.ui.notify(
 				`⛔ ${ctx.ui.theme.fg("error", "CIRCUIT BREAKER")} — refused even under YOLO; confirm manually`,
 				"error",
 			);
 		}
-		const unattended = breaker ? undefined : unattendedGateDecision(highest.tier);
+		const unattended = breaker ? undefined : unattendedGateDecision(pi.events, highest.tier);
 		if (unattended === "allow") return undefined;
 		if (unattended === "deny") {
 			return {

package/src/lib.ts

@@ -2,6 +2,8 @@
  * Pure helpers for pix-gate — no Pi API deps, fully unit-testable.
  */
 
+import type { EventBus } from "@earendil-works/pi-coding-agent";
+import { getUnattendedMode } from "@xynogen/pix-runtime";
 import { config } from "@xynogen/pix-runtime/config";
 import { type GateRuleConfig, gateSection } from "@xynogen/pix-runtime/sections";
 
@@ -222,9 +224,15 @@ export const DEFAULT_PATH_RULES: PathRule[] = [
 		severity: "block",
 		reason: "credentials file",
 	},
+	// Real .env files hold live secrets — block. Placeholder variants
+	// (.env.example/.sample/.template/.dist) carry no secrets, so exclude them.
+	{
+		pattern: /(^|\/)\.env(?:$|\.(?!example|sample|template|dist)[A-Za-z0-9_-]+)/i,
+		severity: "block",
+		reason: ".env file (live secrets)",
+	},
 
 	// warn — yellow allow-first
-	{ pattern: /(^|\/)\.env(\.|$)/i, severity: "warn", reason: ".env file" },
 	{ pattern: /(^|\/)\.envrc$/i, severity: "warn", reason: "direnv file" },
 	{
 		pattern: /(^|\/)\.npmrc$/i,
@@ -312,11 +320,13 @@ export function isCircuitBreaker(command: string): boolean {
  *   yolo — auto-allow every tier, including red/critical.
  *   afk  — auto-allow yellow (tier < 4), auto-deny red (tier >= 4).
  *   off  — undefined (fall through to the interactive dialog).
- * Mutually exclusive globals set by pix-commands' /afk and /yolo.
  */
-export function unattendedGateDecision(tier: number): "allow" | "deny" | undefined {
-	const g = globalThis as { __pixAfk?: boolean; __pixYolo?: boolean };
-	if (g.__pixYolo === true) return "allow";
-	if (g.__pixAfk === true) return tier >= 4 ? "deny" : "allow";
+export function unattendedGateDecision(
+	events: EventBus,
+	tier: number,
+): "allow" | "deny" | undefined {
+	const mode = getUnattendedMode(events);
+	if (mode === "yolo") return "allow";
+	if (mode === "afk") return tier >= 4 ? "deny" : "allow";
 	return undefined;
 }