pirmission-bash-guard

Pi extension that replaces the bash tool with permission-gated execution and exact-match allowlist persistence.

Packages

Package details

extension

Install pirmission-bash-guard from npm and Pi will load the resources declared by the package manifest.

npmhome report
$ pi install npm:pirmission-bash-guard
Package
pirmission-bash-guard
Version
0.1.0
Published
May 13, 2026
Downloads
26/mo · 26/wk
Author
aisatan
License
MIT
Types
extension
Size
7 KB
Dependencies
0 dependencies · 5 peers
Pi manifest JSON
{
  "extensions": [
    "./extensions"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

Pirmission extension

Pi extension that replaces the bash tool with permission-gated execution and exact-match allowlist persistence.

  • It prompts before running each command:
    1. allow once
    2. allow always
    3. deny
  • It executes approved commands in a real shell.
  • It supports optional timeout (seconds).
  • It persists only allow always entries in .agents/pirmissions.jsonl with exact-command matching.

Pirmissions

  • allow once: runs only this call.
  • allow always: appends the exact command string to .agents/pirmissions.jsonl and auto-approves exact matches on later runs.
  • deny: blocks execution.
  • Timeout:
    • if timeout is passed: used as command timeout in seconds
    • if omitted: default 30 seconds

Install

Persistent global install:

pi install git:git@github.com:AiSatan/pirmission.git

Persistent project-local install:

pi install -l git:git@github.com:AiSatan/pirmission.git

Temporary one-run test:

pi -e git:git@github.com:AiSatan/pirmission.git

Notes

  • This extension writes only .agents/pirmissions.jsonl (same workspace root as this repo).
  • Matching is exact; no wildcard/substring logic.