- lib/secrets.ts: shared SECRET_PATTERNS + scanSecrets/redact (AWS/GitLab/GitHub/Slack tokens, private keys, JWT, generic credentials) - lib/audit.ts: local JSONL audit (~/.config/pi-kit/audit.jsonl, 600), optional PI_KIT_AUDIT_URL POST; never logs secret values - secret-scanner: block write/edit whose content matches a secret (complements protected-paths) - commit-guard: enforce Conventional Commits on 'git commit -m' + scan message for secrets - llm-redaction: redact secrets from outbound payload via before_provider_request - audit-log: session_start + slash-command usage; wires company.json auditEndpoint into env - config: auditEndpoint (null); package.json: npm test; test/guardrails.test.ts (16 cases, all pass) Verified: all extensions load via pi (lib/ not loaded as extensions); npm test green.
44 lines
931 B
JSON
44 lines
931 B
JSON
{
|
|
"name": "@mvideo/pi-kit",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"description": "Корпоративный Pi-пакет: шаблоны задач, guardrails и скиллы для команды.",
|
|
"keywords": [
|
|
"pi-package",
|
|
"pi",
|
|
"coding-agent",
|
|
"internal"
|
|
],
|
|
"license": "UNLICENSED",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "git@git.codelab.vc:ai/pi-kit.git"
|
|
},
|
|
"pi": {
|
|
"extensions": [
|
|
"./extensions"
|
|
],
|
|
"skills": [
|
|
"./skills"
|
|
],
|
|
"prompts": [
|
|
"./prompts"
|
|
]
|
|
},
|
|
"scripts": {
|
|
"typecheck": "tsc --noEmit",
|
|
"test": "node --experimental-strip-types test/guardrails.test.ts"
|
|
},
|
|
"peerDependencies": {
|
|
"@earendil-works/pi-coding-agent": "*",
|
|
"@earendil-works/pi-ai": "*",
|
|
"@earendil-works/pi-tui": "*",
|
|
"typebox": "*"
|
|
},
|
|
"dependencies": {},
|
|
"devDependencies": {
|
|
"typescript": "^5"
|
|
}
|
|
}
|