Read-only tools by default. Use /do to unlock edit/write for one request, then automatically reverts to read-only.
# Via git (recommended — pin to a tagged version)
pi install git:github.com/<user>/[email protected]
# Try without installing
pi -e git:github.com/<user>/pi-readonly-defaultOnce installed, the agent starts in read-only mode with only these tools:
read, bash, grep, find, ls
/do # Unlock + "Go ahead"
/do refactor login # Unlock + sends "refactor login" as the prompt
| Step | Effect |
|---|---|
Type /do |
Agent gets edit and write for this request only |
| Agent completes work | Tools automatically revert to read-only |
| Next prompt | Agent is told it's back in read-only mode |
Destructive bash commands are blocked when read-only:
rm, mv, mkdir, touch, chmod, chown, sed, npm install/uninstall, yarn add, pnpm add, pip install, git add/commit/push/reset/rebase, sudo, kill, reboot
Use /do to temporarily lift these restrictions.
No configuration required — works out of the box.
MIT