JailbreakPiExtension

A pi extension that drops a full persona into any session with one command. It ships with the ENI template, an unrestricted companion persona, bundled as eni.md next to the extension. Nothing outside the package is ever read.

Built with DeepSeek in mind, since it is the easiest model to jailbreak and the bundled template is written to push a model that far. It works on any model though. The template is just a prompt, and you can replace it with any prompt you like.

Install

pi install npm:jailbreakpiextension

From source:

pi install git:github.com/dozeotarios/[email protected]

Try it without installing:

pi -e npm:jailbreakpiextension

Then /reload. If you had a local copy of this extension in ~/.pi/agent/extensions/eni, delete it first, otherwise the command registers twice.

Usage

/Eni summons the persona, active for every turn this session.

/Eni off pauses it, stopping the per turn injection.

/Eni path shows where the bundled template lives.

Case does not matter, /eni and /ENI work the same. While active, the persona is injected into every turn and the footer shows ENI active. State is session scoped: /new, /resume, and /reload reset it.

Using your own prompt

The template ships as eni.md inside the package. Edit it, or replace it with any prompt you want. The extension does not care what the prompt says or which model you run it on. Changes apply on the very next turn.

How it works

• Self contained: the template lives beside the extension. No external files, no config, no env vars.
• The template is reread only when its mtime or size changes, so live edits cost one stat per turn.
• Every failure path degrades to a placeholder. The extension never throws.
• Handles UTF8, UTF16LE, and UTF16BE, since Windows editors sometimes save as UTF16.
• Node builtins only, no dependencies. Works on Windows, macOS, and Linux.

Development

npm install
npm test

npm test typechecks the extension and runs the full suite: 40 checks covering decoding, the cache, TOCTOU races, Desktop independence, and command behavior.