@diegopetrucci/pi-permission-gate

A pi extension that prompts before dangerous bash commands and protected file writes.

Package details

extension

Install @diegopetrucci/pi-permission-gate from npm and Pi will load the resources declared by the package manifest.

$ pi install npm:@diegopetrucci/pi-permission-gate

Pi manifest JSON

{
  "extensions": [
    "index.ts"
  ]
}

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

A small pi extension that prompts for confirmation before running potentially dangerous bash commands or writing to protected paths.

This is adapted from the original permission-gate.ts example in earendil-works/pi-mono and kept basically the same.

rm -rf
sudo
chmod / chown with 777
direct write / edit calls touching normalized protected paths:
- exact .git path segments
- exact node_modules path segments
- secret-bearing .env files such as .env and .env.production

Safe .env templates/examples such as .env.example and .env.production.template are allowed.

If pi is running without an interactive UI, it blocks matching commands and protected path writes by default.

pi install npm:@diegopetrucci/pi-permission-gate

pi install npm:@diegopetrucci/pi-extensions

pi install git:github.com/diegopetrucci/pi-extensions

Then reload pi:

/reload

Hooks the tool_call event.
Inspects bash, write, and edit tool calls.
Normalizes relative/absolute paths before matching so traversal tricks do not bypass the guard.
Prompts with a simple Yes / No selector before allowing dangerous commands or protected path writes.