@accolver/bash-guard

Bash Guard pi extension with deterministic sensitive-command protection and LLM voting

Packages

Package details

extension

Install @accolver/bash-guard from npm and Pi will load the resources declared by the package manifest.

npm repo home report

$ pi install npm:@accolver/bash-guard

Package: @accolver/bash-guard
Version: 0.2.1
Published: Oct 31, 2026
Downloads: 341/mo · 241/wk
Author: accolver
License: MIT
Types: extension
Size: 74.7 KB
Dependencies: 0 dependencies · 3 peers

Pi manifest JSON

{
  "extensions": [
    "./extensions/bash-guard"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

Bash Guard

Pi extension that intercepts bash tool calls, applies deterministic safety policy checks, and then uses parallel LLM voters for commands that are not trivially safe.

See extensions/bash-guard/README.md for behavior and configuration.

Quick start

pi install npm:@accolver/bash-guard

Or install directly from GitHub:

pi install git:github.com/accolver/bash-guard

Bash Guard starts disabled by default. Enable in a session with /guard on, or opt in at startup with:

PI_BASH_GUARD_ENABLED=true pi

Development

pnpm install --frozen-lockfile --ignore-scripts
bun test
bun run check

Use native pnpm 11.17.0 for dependency and lockfile changes. Development checks target exact Pi 1.4.0, TypeScript 7.0.2, and Bun types 1.4.4. check performs strict semantic TypeScript validation of extension source and tests (third-party declaration internals are skipped). Host packages remain optional wildcard peers, never bundled. Current validation and release evidence is under .spec-to-ship/features/dependency-refresh-2026-10-31/; .spec-to-ship/features/pi-1-compatibility/ retains historical Pi1.0 evidence.