@xynogen/pix-gate

Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)

Packages

Package details

extension

Install @xynogen/pix-gate from npm and Pi will load the resources declared by the package manifest.

npm repohome report
$ pi install npm:@xynogen/pix-gate
Package
@xynogen/pix-gate
Version
0.1.1
Published
Jun 18, 2026
Downloads
not available
Author
xynogen
License
MIT
Types
extension
Size
17 KB
Dependencies
0 dependencies · 2 peers
Pi manifest JSON
{
  "extensions": [
    "src/index.ts"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

pix-gate

Pi extension — permission gate for dangerous bash commands.

What it does

Intercepts every bash tool call and classifies the command against a set of severity rules before it runs. Three tiers apply: critical commands are blocked outright in non-interactive mode and hard-denied via dialog in TUI mode; dangerous commands (including any sudo invocation, which is redirected to sudo_run) show a 30-second auto-deny confirmation dialog; risky commands show a 60-second allow-first dialog and silently pass in non-interactive mode. Auto-approve patterns and extra rules can be configured in ~/.pi/agent/pix-gate.json. Built-in rules can be replaced entirely by setting disableDefaults: true in the config file.

Install

pi install npm:@xynogen/pix-gate

Configuration

~/.pi/agent/pix-gate.json:

{
  "disableDefaults": false,
  "extraRules": [
    { "pattern": "rm -rf /my-dir", "severity": "critical", "reason": "Deletes project root" }
  ],
  "autoApprove": ["^echo "]
}

Full distro

To install the complete pix suite (all packages + Pi itself):

curl -fsSL https://raw.githubusercontent.com/xynogen/pix-mono/main/scripts/install.sh | sh

License

MIT