# SkyNot

> An npx installer that sets up the Pi coding agent under a dedicated unix user for sandbox-like isolation on Linux or macOS.

SkyNot is an open-source npx tool from the tarsgate organization that installs the Pi coding agent on a local Linux or macOS system under its own dedicated unix user. Running `npx skynot` guides the user through setup, asks for sudo at each step that needs it, and explains what it is doing. The latest release listed is v0.0.755.

## What It Is

SkyNot is a CLI installer and launcher generator for Pi (pi-coding-agent). Instead of a cloud deployment or guardrail extensions, it relies on the unix user model: Pi runs as a separate user with its own home directory where its git repositories live. The project describes this as a middle path between complex cloud deploys and plugins that may give a false sense of security.

## How the Setup Works

The installer checks for wget, creates an `aidev` user and an `aiteam` group, and adds both the aidev user and the current user to that group. It writes a sudoers file so the current user can impersonate `aidev` without a password, and configures umask and ACLs so both users can share files. It then downloads Pi into the aidev home, adds the agent's binary directory to the aidev user's PATH, configures git for shared repositories, and creates a `Work` directory owned by `aidev:aiteam`. Finally it creates a launcher script at `$HOME/bin/spi`.

## Launch Checks and Options

Each time `spi` runs, it verifies the current directory is inside `~aidev/Work`, checks that the user's directories are not readable or writable by `aidev`, and offers to shield any that are, before launching Pi as `aidev`. Flags cover model credentials, git identity, SSH key copying, npm-based installation, a paranoid mode that does not cache the sudo password, updating Pi, verbose output, and a destroy option that removes the user, its data, and the group.

## Requirements

The README lists Linux or macOS, Node.js v22.x, npx, git 2.46 or newer, and the `setfacl` command on Linux.

## Features
- Guided installation of Pi via npx skynot
- Creates a dedicated aidev user and aiteam group
- Passwordless impersonation via a sudoers file
- Shared file access with umask and ACL setup
- Generates an spi launcher script
- Launch-time checks that user directories are not accessible to aidev
- Optional credentials, git identity, and SSH key setup
- Paranoid mode that does not cache the sudo password
- Update and destroy options

## Integrations
Pi coding agent, git, npm

## Platforms
MACOS, LINUX, WEB, API, CLI

## Pricing
Open Source

## Version
0.0.755

## Links
- Website: https://npmjs.com/package/skynot
- Repository: https://github.com/tarsgate/skynot
- EveryDev.ai: https://www.everydev.ai/tools/skynot