context-mode
MCP plugin that saves 98% of your context window. Works with Claude Code, Gemini CLI, VS Code Copilot, OpenCode, and Codex CLI. Sandboxed code execution, FTS5 knowledge base, and intent-driven search.
$ pi install npm:context-modePackage Catalog
Extensions, skills, prompt templates, and themes published to npm. Install with pi install npm:<package>. See the package docs for details.
Recently published
@getpipher/pi-statuslineAdaptive, provider-aware footer for the Pi Coding Agent. Shows authoritative z.ai quota balance.11m ago@astrosheep/squareA shared public square where agents join, catch activity, express, and step out when done.14m ago@arhen/pi-core-subagentpi extension: fast in-process subagents with a dependency-graph scheduler (needs edges gate tasks and carry upstream output into dependent prompts), plus background runs, intercom and agent-to-agent mailbox. Leader defines agents inline.16m agobetterwrightA persistent, policy-guarded Playwright browser for AI agents with network controls, trusted credential filling, proof screenshots, and CAPTCHA helpers.17m agopi-agenticodingContext management primitives for the pi coding agent — spawn, notebook, handoff20m agopi-cliproxyapi-providerPi provider package for CLIProxyAPI with automatic model discovery and models.dev enrichment.22m agopi-shift-routerAn LLM judge routes every Pi agent turn to the right model — fast execution for routine work, smart reasoning for hard problems — with multi-model failover and automatic orchestration.26m agopi-web-uiWeb chat interface for the pi coding agent, powered by the pi SDK (@earendil-works/pi-coding-agent) — one-command run, Docker/systemd/launchd deployable27m ago
All packages
1-50 / 61 (of 5341)
@trim21/personal-pi-extensions
Custom pi coding-agent extensions: bwrap sandbox, workspace guard, opencode edit, and more
$ pi install npm:@trim21/personal-pi-extensions@tangle-network/tcloud-agent
Agent run-loop primitive over Tangle sandbox transports — runs an AgentProfile against a brief with criterion gates, budget caps, and streaming events. Includes TangleToolProvider for Pi tool integration.
$ pi install npm:@tangle-network/tcloud-agent@erichll/pi-sandbox
Linux (bubblewrap) and macOS (Seatbelt) process sandbox for Pi backed by Anthropic's @anthropic-ai/sandbox-runtime. Fail-closed static filesystem policy plus per-connection network approval from pi-auto-review; sandboxes main-agent Bash and built-in subag
$ pi install npm:@erichll/pi-sandbox@erichll/pi-auto-review
Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.
$ pi install npm:@erichll/pi-auto-reviewpi-better-subagents
Pi extension for detached, sandboxed subagent runs that keep the foreground session free.
$ pi install npm:pi-better-subagentspi-better-harness
Pi extension bundle for a default write sandbox, subagents, durable background tasks, and goal tracking.
$ pi install npm:pi-better-harness@johanthoren/jeff
Jeff is a model-native quality control plane and cooperative workflow protocol for trusted operators and friendly agents, not a security sandbox.
$ pi install npm:@johanthoren/jeff@pi-unipi/compactor
Context engine for Pi — zero-LLM compaction, session continuity, sandbox execution, and tool display optimization
$ pi install npm:@pi-unipi/compactorpi-sandbox-usage-status
Pi extension: active-provider quota footer for OpenAI Codex and Kimi Coding.
$ pi install npm:pi-sandbox-usage-statuspicodesandbox
OS-level sandboxing for pi with interactive permission prompts
$ pi install npm:picodesandbox@upstash/box-pi
Pi coding agent extension that runs all tool calls inside a remote Upstash Box sandbox while the agent runs locally
$ pi install npm:@upstash/box-pi@zhushanwen/pi-permission
Pi permission extension — four permission modes (yolo/auto/approve/strict) with three-layer pipeline (AST + rules + AI classifier).
$ pi install npm:@zhushanwen/pi-permissionpi-permission-modes
Declarative, user-definable permission modes for the pi coding agent: OS-level sandboxing (bubblewrap / sandbox-exec), an allow/ask/deny policy engine, real bash AST gating (tree-sitter), tool hiding, and skill/custom-tool gating.
$ pi install npm:pi-permission-modespi-codemcp
Typed, sandboxed Code Mode access to configured MCP servers for Pi
$ pi install npm:pi-codemcp@casualjim/pi-heimdall
Guardian extension for pi — security guards that block accidental secret exposure, enforce command policies, protect .env files, and sandbox bash commands
$ pi install npm:@casualjim/pi-heimdall@boozedog/pi-codemode
Pi Codemode plugin - TypeScript code execution with sandboxed tools, typed host CLI, and MCP integration
$ pi install npm:@boozedog/pi-codemode@xzzpig/pi-sandbox
OS-level sandboxing for pi with interactive permission prompts
$ pi install npm:@xzzpig/pi-sandboxprivateer-workflow
Declarative, routed multi-agent workflows for Pi — a Microsoft-agentic-workflow-style YAML grammar (typed steps, conditional routes, parallel/for_each fan-out, human gates, sub-workflows) run by a decoupled, fail-closed state machine with a sandboxed temp
$ pi install npm:privateer-workflow@agimon-ai/doompi-sandbox
Container sandbox for DoomPi launches: the agent, extensions, and tools run inside Docker or Podman while the terminal stays on the host
$ pi install npm:@agimon-ai/doompi-sandboxpi-os-guard
OS-sandboxed read-only / restricted execution for pi (bubblewrap on Linux, sandbox-exec on macOS).
$ pi install npm:pi-os-guard@d3ara1n/pi-access-denied
Sandbox write/edit/bash to the project dir — prompt / deny / allow modes, configurable deny-with-redirect rules, per-session allow-deny memory
$ pi install npm:@d3ara1n/pi-access-denied@brglng/pi-auto-review
Fail-closed, model-backed approval broker for Pi: deterministically hard-denies dangerous operations, reviews dangerous boundaries with a reviewer model, and issues one-shot expiring grants that OS sandbox adapters must consume before retrying.
$ pi install npm:@brglng/pi-auto-reviewpi-seatbelt-sandbox
macOS Seatbelt sandbox extension package for pi bash and file-tool access controls.
$ pi install npm:pi-seatbelt-sandbox@josephyoung/pi-heimdall
Guardian extension for pi — security guards that block accidental secret exposure, enforce command policies, protect .env files, and sandbox bash commands
$ pi install npm:@josephyoung/pi-heimdall@daytona/pi
Pi coding agent extension that runs all tool calls inside a remote, ephemeral Daytona sandbox while the agent runs locally
$ pi install npm:@daytona/pi@pandi-coding-agent/pandi-container
Extensión de Pi para administrar sandboxes de Apple `container` (micro-VMs Linux): un comando /container y una herramienta container_sandbox invocable por el modelo (status/list/create/run/stop/remove).
$ pi install npm:@pandi-coding-agent/pandi-containerpi-gondolin-mount
pi extension that sandboxes LLM coding agents inside a Gondolin micro-VM with configurable additional mounts
$ pi install npm:pi-gondolin-mount@christianmoesl/pi-sbx
Run Pi coding-agent tool calls inside Docker sbx sandboxes
$ pi install npm:@christianmoesl/pi-sbxtau-coding-agent
Opinionated Pi package with web search, review workflows, sandboxing, memory, usage reporting, skills, and a theme
$ pi install npm:tau-coding-agent@kjrjay/pi-sandbox
Run Pi file and shell tools in an isolated Apple Container or Docker workspace
$ pi install npm:@kjrjay/pi-sandboxpi-supersafety
When the example safety extensions don't cover what you need, this should! Simple with approval flow and windows sandbox capability (with Sandboxie)
$ pi install npm:pi-supersafety@pandi-coding-agent/pandi-podman
Extensión de Pi para ejecutar sandboxes efímeros y restringidos con Podman mediante /podman y la tool podman_sandbox.
$ pi install npm:@pandi-coding-agent/pandi-podmantau-all-agent
Full Tau package for Pi with coding workflows, web search, sandboxing, memory, Telegram, Home Assistant, OpenSCAD, skills, and a theme
$ pi install npm:tau-all-agentpi-code-tool
Code-mode tool for the pi coding agent: a sandboxed Python meta-tool (via @pydantic/monty) that lets the agent write code against host tools and build ephemeral code tools
$ pi install npm:pi-code-toolpi-guard-sandbox
A lightweight OS-level guard for Pi: agents stay useful, sensitive paths stay blocked, and writes stay inside the workspace you allow. No container overhead. No workflow drama.
$ pi install npm:pi-guard-sandboxpi-enclave
VM-isolated sandbox for pi with automatic secret protection · from yapp
$ pi install npm:pi-enclavepi-extension-opensandbox
Server-side Pi extension factory that routes built-in tools to a remote OpenSandbox sandbox
$ pi install npm:pi-extension-opensandboxpi-sandbox-docker
On-demand disposable Docker sandbox for Pi: run code in a fresh, offline Debian container with read-only project mount and per-run network approval.
$ pi install npm:pi-sandbox-dockerpi-container-sandbox
pi coding-agent extension that runs every read/write/edit/bash op inside a per-session Linux container (Apple `container` or Docker).
$ pi install npm:pi-container-sandbox@h4rvey-g/context-mode
MCP plugin that saves 98% of your context window. Works with Claude Code, Gemini CLI, VS Code Copilot, OpenCode, and Codex CLI. Sandboxed code execution, FTS5 knowledge base, and intent-driven search.
$ pi install npm:@h4rvey-g/context-mode@nqbao/pi-sandbox
OS-level sandbox for pi coding agent — macOS sandbox-exec / Linux bubblewrap kernel-enforced isolation
$ pi install npm:@nqbao/pi-sandbox@the-forge-flow/security-harness-pi
Security harness for the PI coding agent — forbids dangerous commands and gates sensitive ones behind user approval
$ pi install npm:@the-forge-flow/security-harness-pi