Auto Mode Gate v0.1.0
First public release of the deterministic permission gate for OpenCode and Pi.
Highlights
- Shared host-neutral policy core with stable structured denial codes.
- Conservative Bash, PowerShell, and CMD analysis without command execution.
- Fail-closed OpenCode and Pi pre-tool adapters.
- Strict global and project configuration that project files cannot relax.
- Optional sanitized JSONL decision logs.
- npm, GitHub, and source-checkout installation paths.
Validated baselines
- OpenCode 1.18.18
- Pi 0.84.1
- Node 24.9.0 for the test suite
Install
OpenCode:
opencode plugin auto-mode-gate@0.1.0 --global
Pi:
pi install npm:auto-mode-gate@0.1.0
Review the package source before installation. Host plugins and extensions run with the user's system permissions.
Known limits
- V1 blocks ambiguous actions and does not invoke a model judge.
- Only calls through the validated pre-tool hooks are covered.
- Trusted executable paths are configuration authority, not immutable file handles.
- Auto Mode Gate is not an operating-system sandbox and does not replace native host permissions.