pi-bash-auto-review

Zero-config model-backed risk reviewer for external_directory and bash permission asks in Pi.

What it does

Registers a @gotgenes/pi-permission-system authorizer chain link named bash-auto-review. For every external_directory or bash ask, it prompts the current model to rate risk and returns allow, deny, or defer. Every error or timeout defers — no auto-approval on failure.

• No config file
• No model selection — uses whatever model Pi is running

Enable

Add the link name to your permission system config:

// ~/.pi/agent/extensions/pi-permission-system/config.json
{
  "authorizerChain": ["bash-auto-review"]
}

Verdict range

allow | deny | defer

• allow — routine reads, standard build/test/git ops
• deny — destructive system writes, credential exfiltration, forced recursive root deletion, curl-to-shell, privilege escalation
• defer — ambiguous, needs human judgment, or any error/timeout

Tests

npm test

Type-check:

npm run check