3 Commits

Author	SHA1	Message	Date
Aleksey Shakhmatov	7e50043984	feat(security): secret-scanner, commit-guard, llm-redaction, audit-log ... - lib/secrets.ts: shared SECRET_PATTERNS + scanSecrets/redact (AWS/GitLab/GitHub/Slack tokens, private keys, JWT, generic credentials) - lib/audit.ts: local JSONL audit (~/.config/pi-kit/audit.jsonl, 600), optional PI_KIT_AUDIT_URL POST; never logs secret values - secret-scanner: block write/edit whose content matches a secret (complements protected-paths) - commit-guard: enforce Conventional Commits on 'git commit -m' + scan message for secrets - llm-redaction: redact secrets from outbound payload via before_provider_request - audit-log: session_start + slash-command usage; wires company.json auditEndpoint into env - config: auditEndpoint (null); package.json: npm test; test/guardrails.test.ts (16 cases, all pass) Verified: all extensions load via pi (lib/ not loaded as extensions); npm test green.	2026-07-16 13:46:22 +03:00
Aleksey Shakhmatov	640e1da3c6	fix(extensions): avoid premature block-comment close; mark package as ESM ... - protected-paths.ts: reword comment that contained a globstar+slash sequence which closed the /** */ block early (caused a ParseError at load) - package.json: add "type": "module" (extensions are ESM) Verified locally: pi install ./, all 5 commands + 4 skills load via RPC get_commands, /kit-config prints values+source, dynamic config change reflected, protected-paths + permission-gate pass a behavioral test suite.	2026-07-16 11:19:12 +03:00
Aleksey Shakhmatov	76b3d71340	chore: add package manifest, config source-of-truth and tsconfig ... - package.json with pi section (extensions/skills/prompts) and Pi libs as peerDependencies (*) - config/company.json as the single source of truth (values are TODO, gitHost set) - tsconfig.json for optional local typecheck	2026-07-16 10:53:55 +03:00