@qmxme/pi-git-guard

Blocks destructive git operations in pi to prevent accidental pushes, tag deletions, or hard resets.

Blocked Operations

The following git commands are unconditionally blocked:

| Command | Reason | |---------|--------| | git push (any form) | Publishing is controlled manually | | git tag -d / git tag --delete | Prevents accidental tag deletion | | git reset --hard | Prevents discarding uncommitted changes |

Examples

Blocked:

git push                          # ❌ Blocked
git push origin main              # ❌ Blocked
git push --force                  # ❌ Blocked
git tag -d v1.0                   # ❌ Blocked
git tag --delete old-tag          # ❌ Blocked
git reset --hard                  # ❌ Blocked
git reset --hard HEAD~1           # ❌ Blocked

Allowed:

git status                        # ✅ Allowed
git push --dry-run                # ❌ Still blocked (all push blocked)
git pull                          # ✅ Allowed
git fetch                         # ✅ Allowed
git reset --soft HEAD             # ✅ Allowed
git reset --mixed HEAD            # ✅ Allowed
git tag v1.0                      # ✅ Allowed (tag creation)

Installation

Install globally:

pi install npm:@qmxme/pi-git-guard

Install project-local:

pi install npm:@qmxme/pi-git-guard -l

Try without installing:

pi -e npm:@qmxme/pi-git-guard

How It Works

When pi attempts to execute a blocked git command:

1. The command is intercepted before execution
2. A warning notification is shown (if in interactive mode)
3. The command is blocked with a clear reason

The LLM will see the block reason in the tool result and can adjust its approach.

Development

npm install      # Install dependencies
npm test         # Run tests
npm run typecheck # Type check

License

MIT