pi-permissive

A deliberately permissive permission gate for pi — blocks only destructive commands, never nags.

Packages

Package details

extension

Install pi-permissive from npm and Pi will load the resources declared by the package manifest.

npm repohome report
$ pi install npm:pi-permissive
Package
pi-permissive
Version
0.3.0
Published
Jun 20, 2026
Downloads
not available
Author
nilskluewer
License
MIT
Types
extension
Size
37.6 KB
Dependencies
0 dependencies · 1 peer
Pi manifest JSON
{
  "extensions": [
    "./extensions"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

pi-permissive

A permissive permission gate for pi — it stays out of your way, only gating what genuinely matters, and never hard-blocks anything you might legitimately want to do.

Rules

DENY — hard block, never runs:

  • git push --force to main
  • rm -rf on system/home paths (/, /Users, ~/, $HOME, …)
  • sudo rm
  • mkfs, dd … of=/dev/…, shutdown/reboot/halt/poweroff
  • Fork bombs
  • Writing/editing credentials & keys (~/.ssh, ~/.aws, ~/.gnupg, ~/.config/gh, .netrc, id_rsa, *.pem, *.key)

ASK — prompts you; runs if you approve, blocks if you decline or there's no UI:

  • git push --force (to non-main branches; --force-with-lease is silent)
  • git push to main
  • git push --delete (remote ref deletion)
  • git reset --hard, git clean -f, git branch -d/-D, git filter-branch, git reflog expire, git update-ref -d
  • Reading or writing .env files
  • Reading any credential/key path

ALLOW — everything else, silently. This is the default.

Install

pi install git:github.com/nilskluewer/pi-permissive
# or pin a version:
pi install git:github.com/nilskluewer/pi-permissive@v0.3.0

Also on npm:

pi install npm:pi-permissive

Tests

cd sandbox/permission-tests
./run.sh

Requires Node 22.6+. The suite includes deterministic self-validation: every rule carries match/no-match examples that are checked against its own regex, so you can't change a pattern without proving what it matches.

License

MIT