pirmission-bash-guard
v0.1.0
Published
Pi extension that replaces the bash tool with permission-gated execution and exact-match allowlist persistence.
Readme
Pirmission extension
Pi extension that replaces the bash tool with permission-gated execution and exact-match allowlist persistence.
- It prompts before running each command:
allow onceallow alwaysdeny
- It executes approved commands in a real shell.
- It supports optional timeout (seconds).
- It persists only
allow alwaysentries in.agents/pirmissions.jsonlwith exact-command matching.
Pirmissions
allow once: runs only this call.allow always: appends the exact command string to.agents/pirmissions.jsonland auto-approves exact matches on later runs.deny: blocks execution.- Timeout:
- if
timeoutis passed: used as command timeout in seconds - if omitted: default
30seconds
- if
Install
Persistent global install:
pi install git:[email protected]:AiSatan/pirmission.gitPersistent project-local install:
pi install -l git:[email protected]:AiSatan/pirmission.gitTemporary one-run test:
pi -e git:[email protected]:AiSatan/pirmission.gitNotes
- This extension writes only
.agents/pirmissions.jsonl(same workspace root as this repo). - Matching is exact; no wildcard/substring logic.
