@sdillen/pi-ssh

pi extension: run all tools on an SSH host, with sudo and YubiKey/ED25519-SK support via ControlMaster

Package details

extension

Install @sdillen/pi-ssh from npm and Pi will load the resources declared by the package manifest.

$ pi install npm:@sdillen/pi-ssh

Pi manifest JSON

{
  "extensions": [
    "./dist/index.js"
  ]
}

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

A pi extension that runs all tools on an SSH host.

read/write/edit/bash and ! commands execute remotely.
A dedicated sudo tool with a masked password dialog. The password is never written to the LLM context or the session file.
One-time interactive YubiKey / ED25519-SK authentication, then all calls reuse a ControlMaster socket.

pi install npm:@sdillen/pi-ssh

Try it for a single run:

pi -e npm:@sdillen/pi-ssh --ssh user@host[:/remote/path]

Requirements: bash on the remote host and a reachable SSH key.

sudo is its own tool. sudo ... in the bash tool is rejected remotely. The sudo tool runs the command as sudo bash -c, so pipes, &&, and redirects all run as root.
Password: remembered for 4 minutes, then asked again. A wrong password triggers one retry.
Authentication: after the first interactive authentication, the ControlMaster socket (~/.ssh/controlmaster/...) is reused. Its lifetime after the last connection is SSH_CONTROL_PERSIST seconds (default 43200 = 12 h). If the master dies mid-session, pi re-authenticates once automatically.

Full architecture notes and the development setup are in the repository README.