Repository navigation
Command permissions #3960
Description
What feature would you like to see?
I would suggest three permissions for command line commands. Always block, Always ask and Always allow
This could come as options the first time it tries to run a command. For example if it tries to run 'git' you would see the options: "Allow once", "Always allow", "Always ask", "Always block", "Block once". Essentially what this would do is to add commands to a blacklist and a whitelist. Commands that are not on either a blacklist or a whitelist would be "always ask" so no need for an extra list for this.
Are you interested in implementing this feature?
No response
Additional information
No response
Activity
arteagacz commentedon Sep 22, 2025
That would be useful, but it is important to be able to allow all command executions too, regardless of params, so not just "nl -ba packages/shared/src/services/base/base.service.ts" but something like "nl /"
AlexB138 commentedon Oct 27, 2025
Strongly support this. It is tedious to have to approve the same commands over and over.
If finer granularity is needed, perhaps parameters could be regexed. That is to say, you could approve the command
foo *OR some more strict regex wherefoo baris allowed butfoo bazis not.[-]command permissions[/-][+]Command permissions[/+]etraut-openai commentedon Dec 14, 2025
I'm going to close this in favor of #3085, which has more upvotes.
We have recently added a new preview feature called "rules" which implements this functionality. For details, refer to this documentation.
ziyuang commentedon Feb 16, 2026
Page not found
etraut-openai commentedon Feb 16, 2026
@ziyuang, apologies for the stale link. Here's the updated link. I've also updated my original post.