Files
pi-kit/package.json
Aleksey Shakhmatov 7e50043984 feat(security): secret-scanner, commit-guard, llm-redaction, audit-log
- lib/secrets.ts: shared SECRET_PATTERNS + scanSecrets/redact (AWS/GitLab/GitHub/Slack tokens, private keys, JWT, generic credentials)
- lib/audit.ts: local JSONL audit (~/.config/pi-kit/audit.jsonl, 600), optional PI_KIT_AUDIT_URL POST; never logs secret values
- secret-scanner: block write/edit whose content matches a secret (complements protected-paths)
- commit-guard: enforce Conventional Commits on 'git commit -m' + scan message for secrets
- llm-redaction: redact secrets from outbound payload via before_provider_request
- audit-log: session_start + slash-command usage; wires company.json auditEndpoint into env
- config: auditEndpoint (null); package.json: npm test; test/guardrails.test.ts (16 cases, all pass)

Verified: all extensions load via pi (lib/ not loaded as extensions); npm test green.
2026-07-16 13:46:22 +03:00

44 lines
931 B
JSON

{
"name": "@mvideo/pi-kit",
"version": "0.1.0",
"private": true,
"type": "module",
"description": "Корпоративный Pi-пакет: шаблоны задач, guardrails и скиллы для команды.",
"keywords": [
"pi-package",
"pi",
"coding-agent",
"internal"
],
"license": "UNLICENSED",
"repository": {
"type": "git",
"url": "git@git.codelab.vc:ai/pi-kit.git"
},
"pi": {
"extensions": [
"./extensions"
],
"skills": [
"./skills"
],
"prompts": [
"./prompts"
]
},
"scripts": {
"typecheck": "tsc --noEmit",
"test": "node --experimental-strip-types test/guardrails.test.ts"
},
"peerDependencies": {
"@earendil-works/pi-coding-agent": "*",
"@earendil-works/pi-ai": "*",
"@earendil-works/pi-tui": "*",
"typebox": "*"
},
"dependencies": {},
"devDependencies": {
"typescript": "^5"
}
}