@xynogen/pix-gate 0.4.3 → 0.4.5

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@xynogen/pix-gate",
-	"version": "0.4.3",
+	"version": "0.4.5",
 	"description": "Pi extension \u2014 permission gate for dangerous bash commands (confirm/block with TUI dialog)",
 	"type": "module",
 	"main": "src/index.ts",

package/src/lib.ts

@@ -323,8 +323,11 @@ export function buildRules(cfg: UserConfig): {
 	pathRules: PathRule[];
 } {
 	const base = cfg.guardrails === "off" ? [] : DEFAULT_RULES.slice();
+	// `g`/`y` make RegExp.test() stateful (lastIndex), so the same command would
+	// match on one call and slip through on the next. Strip them.
+	const stateless = (flags: string) => flags.replace(/[gy]/g, "");
 	const extra = (cfg.extraRules ?? []).map((r) => ({
-		pattern: new RegExp(r.pattern, r.flags ?? "i"),
+		pattern: new RegExp(r.pattern, stateless(r.flags ?? "i")),
 		severity: (r.severity ?? "dangerous") as Severity,
 		reason: r.reason ?? "user-defined rule",
 	}));

package/src/prompt.ts

@@ -145,7 +145,7 @@ const SEVERITY_TIER: {
 export async function promptMergedGateDecision(
 	ui: GatePromptUI,
 	concerns: Concern[],
-	command: string,
+	_command: string,
 ): Promise<GateDecision> {
 	// Sort by tier desc so the highest-severity concern drives dialog behavior.
 	const sorted = [...concerns].sort((a, b) => b.tier - a.tier);
@@ -163,11 +163,12 @@ export async function promptMergedGateDecision(
 			uniqueLabels.push(key);
 		}
 	}
-	const titleSuffix = command.length > 55 ? `${command.slice(0, 52)}…` : command;
-	const title = `${uniqueLabels.join(" + ")} — ${titleSuffix}`;
+	const title = uniqueLabels.join(" + ");
 
-	// Body: command + concern list
-	const body = [command, "", ...sorted.map((c) => `${c.icon} ${c.label} — ${c.detail}`)];
+	const body = [
+		"Review the command in the tool card below.",
+		...sorted.map((c) => `${c.icon} ${c.label} — ${c.detail}`),
+	];
 
 	const accent =
 		highest.tier >= SEVERITY_TIER.critical
@@ -234,7 +235,7 @@ const TIMEOUT_BY_TIER: Record<string, number> = {
 export async function promptGateDecision(
 	ui: GatePromptUI,
 	hit: Rule,
-	command: string,
+	_command: string,
 ): Promise<GateDecision> {
 	const icon = SEVERITY_ICON[hit.severity];
 	const label = titleCase(hit.severity);
@@ -268,7 +269,7 @@ export async function promptGateDecision(
 		mode: "confirm",
 		icon,
 		title: `${label} — ${hit.reason}`,
-		body: [command],
+		body: ["Review the command in the tool card below."],
 		accent,
 		timeoutMs: TIMEOUT_MS[hit.severity],
 		choices,