@sikongjueluo/pi-permission-inner-cmd
pi extension: an inner-command Authorizer that routes native Bash asks from pi inner commands through the pi-permission-system dialog
Package details
Install @sikongjueluo/pi-permission-inner-cmd from npm and Pi will load the resources declared by the package manifest.
$ pi install npm:@sikongjueluo/pi-permission-inner-cmd- Package
@sikongjueluo/pi-permission-inner-cmd- Version
0.0.1- Published
- Sep 17, 2026
- Downloads
- 156/mo · 10/wk
- Author
- sikongjueluo
- License
- GPL-3.0-only
- Types
- extension
- Size
- 63.6 KB
- Dependencies
- 0 dependencies · 2 peers
Pi manifest JSON
{
"extensions": [
"./src/index.ts"
]
}Security note
Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.
README
pi-permission-inner-cmd
pi 内部命令的 Bash 授权器:把 pi 内部命令触发的原生 Bash 确认请求送进 pi-permission-system 的人工弹窗,并只在证明过的 UI 根会话上注册。
安装
pi install npm:@sikongjueluo/pi-permission-inner-cmd
或从仓库安装:
pi install github.com/SikongJueluo/pi-extensions
前提:项目启用 @gotgenes/pi-permission-system
≥ 32,并把 inner-cmd 挂进授权链(链按书写顺序依次咨询,仅 UI 会话生效):
// .pi/extensions/pi-permission-system/config.json
{ "authorizerChain": ["inner-cmd", "ai-bash-judge"] }
工作方式
- 仅在捕获到 UI-present 的根会话(
session_start且 sessionId 非空)后,才向权限服务注册inner-cmd授权器;headless / in-process 子代理不注册,避免子会话上下文冒充根会话 - 扩展与权限系统谁先就绪都能完成注册(
PERMISSIONS_READY_CHANNEL重试) - 会话 id 中途变化时按活会话 id 重新解析服务并重挂授权器
- 授权时从结构化 prompt 载荷提取完整命令与触发单元作为证据,逐个 handler 判决
session_shutdown时注销授权器
测试
pnpm check && pnpm test