@gotgenes/pi-permission-system
Permission enforcement extension for the Pi coding agent.
$ pi install npm:@gotgenes/pi-permission-systemPackage Catalog
Extensions, skills, prompt templates, and themes published to npm. Install with pi install npm:<package>. See the package docs for details.
Recently published
pi-web-search-litePi extension: lightweight web_search + web_fetch with configurable search provider and fetch chain.6m agopi-braid🥨 Braid - Metacognitive extension suite for pi coding agent: Adds memory, plan tracking, structured cognitive signals and completion checks on top of pi core loop, so long sessions keep their context and stop claiming unfinished work.10m agopi-figma-kitPi extension: 35 Figma tools (design context, HTML/React/Tailwind/Compose codegen, screenshots, visual diff, version diff, assets, design tokens, prototype flows, comments) and a /figma project browser, over the Figma REST API, with an optional bridge to 18m ago@arhen/pi-core-subagentpi extension: fast in-process subagents with a dependency-graph scheduler (needs edges gate tasks and carry upstream output into dependent prompts), plus background runs, intercom and agent-to-agent mailbox. Leader defines agents inline.22m ago@phantomcodes/cliAI inference for your coding agents. Route models, control spending, and fund your workspace.27m agopi-webWeb UI for the pi coding agent29m ago@ravshansbox/pi-subagentSubagent extension for pi29m ago@ravshansbox/pi-notificationOSC 777 terminal notification extension for pi29m ago
All packages
1-50 / 87 (of 5379)
@pi-unipi/workflow
Plan mode and permission modes for the Pi coding agent
$ pi install npm:@pi-unipi/workflowpi-better-sandbox
Pi extension with independent Main and Subagents permission profiles, file guards, and OS sandbox enforcement.
$ pi install npm:pi-better-sandbox@adeildo/pi-ask-permission
A permission dialog for the Pi coding agent. Approve, always approve, or deny a tool call, and attach a note the model reads with the result.
$ pi install npm:@adeildo/pi-ask-permission@adeildo/pi-harness
Every adeildo Pi extension in one install: the permission dialog, the look, the providers, the questions, the skill calls the session tasks and the context pruning. Each is its own extension, so pi config turns one off.
$ pi install npm:@adeildo/pi-harness@andares/pi-toolkits
Integrated toolkit extension for pi — ask mode (read-only Q&A), session-scoped permission checks, model favorites, prompt stash, third-party code review, session autostart, a dedicated compaction model, and an agent memory framework (/ask-init)
$ pi install npm:@andares/pi-toolkits@ladbabynpm/picc-claude-shim
Drop-in replacement for Claude Code CLI. Speaks Claude Code's NDJSON protocol (--output-format stream-json / --input-format stream-json / --permission-prompt-tool stdio) so that third-party tools like hapi can drive pi instead of Claude Code. Internally c
$ pi install npm:@ladbabynpm/picc-claude-shimzcode-executor
Claude plans, ZCode codes, git verifies. Hand a development task to the local ZCode (GLM) agent in an isolated git worktree, with a hard-rule + model-review permission gate. 把开发任务派给本机 ZCode 执行，worktree 隔离，红线加模型审批，git diff 验收
$ pi install npm:zcode-executorpi-permission-system
Permission enforcement extension for the Pi coding agent.
$ pi install npm:pi-permission-system@adeildo/pi-tasks
What a pi session is doing, what it did and with what result, what waits and on whom, and what was decided. Kept by a small model from your words and the agent's work, for you, the permission judge and other agents.
$ pi install npm:@adeildo/pi-taskspi-permission-modes
Switchable, user-definable permission modes for the pi coding agent. Each mode pairs an OS-level sandbox (bubblewrap, sandbox-exec, native Windows) with an allow / ask / deny policy for every tool. Default, Plan Mode, Build and YOLO ship; retune them or a
$ pi install npm:pi-permission-modespi-verdict
A minimal permission gate for Pi, inspired by Claude Code's auto mode
$ pi install npm:pi-verdict@vanillagreen/pi-qol
Pi quality-of-life extension: compact statusline/π prompt, reliable multiline input, styled pasted-image chips, session naming/search/context import, scheduled prompts, handoff, permission prompts, notifications, custom compaction, and a collapsed-thinkin
$ pi install npm:@vanillagreen/pi-qol@zhushanwen/pi-permission
Pi permission extension — four permission modes (yolo/auto/approve/strict) with three-layer pipeline (AST + rules + AI classifier).
$ pi install npm:@zhushanwen/pi-permissionpi-permission-ai-guard
Token-optimized LLM permission reviewer — a pi-permission-system Authorizer chain link
$ pi install npm:pi-permission-ai-guardpi-bouncer
Guards Pi's bash tool: asks before destructive commands, blocks catastrophic ones, with an optional model-judged auto mode
$ pi install npm:pi-bouncer@mzwing/pi-permission-auto-review
Codex-style automatic approval reviews for @gotgenes/pi-permission-system
$ pi install npm:@mzwing/pi-permission-auto-review@xynogen/pix-gate
Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)
$ pi install npm:@xynogen/pix-gate@thurstonsand/pi-permissions
Pi extension package for user, project, and package-level tool permission hooks
$ pi install npm:@thurstonsand/pi-permissionspi-autonomy-profiles
Standalone Auto Mode commands, permission modes, and guardrails for Pi
$ pi install npm:pi-autonomy-profiles@yaosu/pi-path-guard
Path Guard for pi — blocks destructive commands & path overwrites, protects .env/keys, with strict/normal/loose/trusted/naked guard modes (/guard). pi 防误删/防误覆盖扩展，支持 5 种防护模式。
$ pi install npm:@yaosu/pi-path-guard@pi-kit/permissions
Allow/ask/deny guardrail extension for the Pi coding agent. No third-party runtime dependencies.
$ pi install npm:@pi-kit/permissions@hank-warren/pi-auto-permissions
Fork of @ogulcancelik/pi-auto-permissions with dialog-answer user evidence: context-aware Bash permissions for Pi with automated guardian review.
$ pi install npm:@hank-warren/pi-auto-permissionspi-permission-gate
Config-driven permission system for Pi agents. Deny-by-default tool restriction with glob matching, path normalization, self-protection, and structured logging.
$ pi install npm:pi-permission-gatepi-allowlist-plugin
Pi extension that gates dispositive tool calls (edits, shell commands, MCP calls) behind an allowlist/denylist. Anything unlisted asks for approval via a UI dialog, enforced by the app and never by the model.
$ pi install npm:pi-allowlist-pluginpi-minimal-permission-system
Minimal permission enforcement extension for the Pi coding agent.
$ pi install npm:pi-minimal-permission-system@johansja/pi-permission-gate
LLM-powered safety gate for pi: classifies bash and MCP tool calls by risk before execution, with CWD-aware judgments.
$ pi install npm:@johansja/pi-permission-gate@xzzpig/pi-permission-system
Permission enforcement extension for the Pi coding agent. Fork of @gotgenes/pi-permission-system (v42.0.0) with configurable wrapper-floor behavior.
$ pi install npm:@xzzpig/pi-permission-system@ladbabynpm/picc-permission-modes
Claude Code style permission modes (default, acceptEdits, plan, bypassPermissions, auto) and user-defined permission rules for the pi coding agent. A more faithful port of Claude Code's harness than pi-permission-modes.
$ pi install npm:@ladbabynpm/picc-permission-modes@capa00/pi-communication
Telegram messaging, contact permissions, and a persistent communication service for pi.
$ pi install npm:@capa00/pi-communication@manuelstolze/pi-permission-gate
Pi extension that asks before running dangerous bash commands.
$ pi install npm:@manuelstolze/pi-permission-gate@inobit/pi-permission
Lightweight permission enforcement extension for the Pi coding agent: sensitive-file guard, read/write-aware project boundary, dangerous-operation confirmation, and plan/build read-only mode.
$ pi install npm:@inobit/pi-permissionpi-automode-classifier
Auto mode for Pi: deterministic rules first, then a local decision model, then a confirm prompt
$ pi install npm:pi-automode-classifier@diegopetrucci/pi-permission-gate
A pi extension that prompts before dangerous shell commands and protected file writes.
$ pi install npm:@diegopetrucci/pi-permission-gate@mammothb/pi-permissions
Permission enforcement extension for pi — gates tool calls, bash commands (via arbiter executable), and file paths
$ pi install npm:@mammothb/pi-permissionspi-permission-bash-cmd-checker
Pi TUI enhancement plugin for @gotgenes/pi-permission-system with bash command explanations and optional risk assessment
$ pi install npm:pi-permission-bash-cmd-checkerpermission-guard-pi
Layered, configurable file-access control for pi-coding-agent. Dual region (project_inner / project_outer) x three-tier permissions (read_write / read_only / unread), with session- and persistent-grant memory, audit log, and default-sensitive-path fallbac
$ pi install npm:permission-guard-pi@bacnh85/pi-classifier
System One decision models (TypeSafe Jev) for Pi — classify tool for typed probabilistic answers, a Jev-gated permission auto-approve hook for shell commands (default on, static risky list first, never auto-denies, fails safe, observe mode), and a /classi
$ pi install npm:@bacnh85/pi-classifier@restranger/repi-permission-system-core
Security-hardened permission gateway, bash analysis, and path access control for pi-coding-agent
$ pi install npm:@restranger/repi-permission-system-core@xzzpig/pi-sandbox
OS-level sandboxing for pi with interactive permission prompts
$ pi install npm:@xzzpig/pi-sandboxpi-run-mode
Ask, plan, and auto workflows for pi — control permissions, plan safely, and execute with the right model
$ pi install npm:pi-run-mode@nilskluewer/pi-auto-permission-gate
Confirm or block dangerous bash commands before the Pi coding agent executes them.
$ pi install npm:@nilskluewer/pi-auto-permission-gate@clang.engineer/pi-notify
Completion and permission notifications for Pi coding agent
$ pi install npm:@clang.engineer/pi-notify