Tool permission enforcement for pi agents — gates tool calls based on safety classifications.
Status: Skeleton. Full implementation will be extracted from
@marcfargas/pi-plannerin a future iteration.
plan_skill_safetytool for agents to register skill safety levels- Bash command filtering based on READ/WRITE classifications
/safetycommand for inspecting the registry- Configurable enforcement modes (log, warn, block)
- @marcfargas/pi-safety — Core safety registry (types, glob matching, classification)
- @marcfargas/permission-gate — Pi extension that enforces safety classifications (this package)
- @marcfargas/pi-planner — Plan workflow that uses both for plan-mode enforcement