@xynogen/pix-gate 0.3.0 → 0.3.2

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@xynogen/pix-gate",
-	"version": "0.3.0",
+	"version": "0.3.2",
 	"description": "Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)",
 	"type": "module",
 	"main": "src/index.ts",

package/src/index.ts

@@ -137,10 +137,15 @@ export default function (pi: ExtensionAPI): void {
 		risky: 1,
 	};
 
+	// The unified command gate also covers pix-proc's `proc` tool: its `start`
+	// action carries a shell command in `event.input.command`, identical to bash.
+	// proc's other actions (list/logs/stop/rm) carry no command and pass straight
+	// through. Install pix-proc without pix-gate = ungated, same as bash.
+	const GATED_COMMAND_TOOLS = new Set(["bash", "proc"]);
 	pi.on("tool_call", async (event, ctx) => {
-		if (event.toolName !== "bash") return undefined;
+		if (!GATED_COMMAND_TOOLS.has(String(event.toolName))) return undefined;
 
-		const command = String(event.input.command ?? "");
+		const command = String((event.input as Record<string, unknown>).command ?? "");
 		if (!command.trim()) return undefined;
 
 		// Collect all concerns: path hits + command hit
@@ -148,6 +153,16 @@ export default function (pi: ExtensionAPI): void {
 
 		// Path concerns
 		const candidates = extractPathsFromBash(command);
+
+		// Steer a blocked ssh-config read toward the dedicated `ssh info` tool
+		// (ssh_run action:"info"), which reads the effective config without touching
+		// ~/.ssh directly. Only when ssh_run is installed. Appended to the block
+		// reason so the model reads it and stops retrying with awk/grep/raw ssh.
+		const readsSshConfig = candidates.some((p) => /(^|\/)\.ssh\/config\b/i.test(p));
+		const sshInfoSteer =
+			readsSshConfig && isRegistered("ssh_run")
+				? ' Use the ssh_run tool with action:"info" to read the effective SSH config instead of reading ~/.ssh/config in bash.'
+				: "";
 		for (const p of candidates) {
 			const hit = classifyPath(p, "read", pathRules);
 			if (!hit) continue;
@@ -208,7 +223,7 @@ export default function (pi: ExtensionAPI): void {
 		if (unattended === "deny") {
 			return {
 				block: true,
-				reason: `[AFK][${highest.label}] ${highest.detail}`,
+				reason: `[AFK][${highest.label}] ${highest.detail}${sshInfoSteer}`,
 			};
 		}
 
@@ -219,7 +234,7 @@ export default function (pi: ExtensionAPI): void {
 			if (highest.tier >= SEVERITY_TIER.block) {
 				return {
 					block: true,
-					reason: `[${highest.label}] ${highest.detail} (no UI, auto-blocked)`,
+					reason: `[${highest.label}] ${highest.detail} (no UI, auto-blocked)${sshInfoSteer}`,
 				};
 			}
 			return undefined;
@@ -260,7 +275,7 @@ export default function (pi: ExtensionAPI): void {
 
 		if (!decision.approved) {
 			ctx.ui.notify(`${highest.icon} ${decision.reason}: ${highest.detail}`, "warning");
-			return { block: true, reason: `[${highest.label}] ${decision.reason}` };
+			return { block: true, reason: `[${highest.label}] ${decision.reason}${sshInfoSteer}` };
 		}
 
 		const severityColor =