Handle user permissions for routes based on roles.
Pi extension — permission gate for dangerous bash commands (confirm/block with TUI dialog)
Useful hooks and utils for use with feathers services.
Fine-grained access control using CASL — define, evaluate, and enforce ability-based permissions with role and resource scoping
TypeScript library bridging the Web Permissions API to a unified check/request interface — Notification, Geolocation, Camera, Microphone, Clipboard, MIDI, DeviceOrientation, DeviceMotion, PersistentStorage.
PreToolUse hook for Claude Code that auto-allows read-only shell commands
PreToolUse hook for Claude Code that auto-allows read-only shell commands
PreToolUse hook for Claude Code that auto-allows read-only shell commands
A lightweight permissions library for express & Node
TypeScript SDK for the Nexus permission contract — Redis-cached callerHasPermission, NestJS module, and event-driven cache invalidation. Role-permissions are codegen'd from wazobiatech/permission-contract.
React component library for user mentions with typeahead search, permission validation, and notification integration
Portable plug-and-play agent SDK: invoke protocol, transports (http/local/ipc/langgraph), manifest + permission contract.
NestJS Action Guard for HRM permission system
Common permission and authorization utilities for backend plugins
Allow all policy backend module for the permission plugin.
Claude-Code-style permission modes (ask / plan / auto) for the pi coding agent — with per-mode model profiles, outside-cwd write tracking, and per-mode skill filtering.
Permission decisions: modes (default/plan/auto/bypass) over a 5-source RuleSet, built on @crewhaus/tool-permission-matcher
Token-gated permission resolver. Reads on-chain ownership (ERC-20 balance, ERC-721 ownerOf) and emits alwaysAllow / alwaysDeny PermissionRule records. §47 slice 1; supports Shape 9 (Tokenized Access) and Shape 12 (DID/credential).
Pattern matchers for permission rules (Bash(git *), Read, Write( /src/ ))
Permission types, enums, and access checking for FeedMe services.
tenantAction — the server-action wrapper that opens the tenant transaction, sets the RLS org GUC, gates on permission, and binds audit
Permission enforcement extension for the Pi coding agent.
Cursor hooks: doctrine at session start, intent-precompile (.scope.json), Step 0 hard gate, scope refresh/drain, mid-session milestone verify, permission gate, final review at stop.