Deny Destructive Shell Commands With Deterministic Hard-deny Checks And Bash Ast

Pi/Oh My Pi extension that adds Claude Code-style auto mode: it intercepts agent tool calls and blocks them via permission rules, deterministic hard-deny checks, or an LLM classifier. Includes slash commands, a status line, and read-only diagnostics. Not a sandbox.

AI Coding | TypeScript · auto-mode · guardrails