aws / aws/amazon-q-developer-cli

Need ability to manage trusted commands - convert trusted commands back to untrusted

Open
#2,404 1 comment 0 reactions 0 assignees View on GitHub
waiting-for-feedback
Dominant language
Rust
Stars
2k
Forks
439
PR merge metrics
No merged PRs in 30d

Description

### Checks

- [x] I have searched [github.com/aws/amazon-q-developer-cli/issues](https://github.com/aws/amazon-q-developer-cli/issues?q=) and there are no duplicates of my issue
- [x] I have run `q doctor` in the affected terminal session
- [x] I have run `q restart` and replicated the issue again

### Operating system

macOS 15.5.0 (24F74)

### Expected behaviour

Users should be able to:

1. View a list of currently trusted commands/patterns
2. Remove specific commands from the trusted list (convert trusted back to untrusted)
3. Clear all trusted commands at once
4. Have a configuration interface or command to manage trust settings

For example: `q settings trusted-commands list`, `q settings trusted-commands remove `, `q settings trusted-commands clear`

### Actual behaviour

Currently, when a user accidentally marks a command as trusted (using 't' in the y/n/t prompt), there's no apparent way to:

- See what commands are trusted
- Remove a specific command from the trusted list
- Manage trust settings through the CLI

The trust settings appear to be stored internally without user access through `q settings` or configuration files. Users can only reset ALL settings by removing the entire configuration directory.

### Steps to reproduce

1. Run a command that triggers the y/n/t prompt
2. Select 't' (trusted) by mistake
3. Try to find a way to untrust that command
4. Check `q settings --help`, `q --help`, configuration files
5. No clear method exists to manage trusted commands

### Environment

```yaml
[q-details]
version = "1.12.7"
hash = ""
date = "2025-07-22T17:41:04.597455Z (5d ago)"

[system-info]
os = "macOS 15.5.0 (24F74)"
chip = "Apple M2"
total-cores = 8
memory = "16.00 GB"

[environment]
cwd = ""
cli-path = ""
install-method = "unknown"

[env-vars]
QTERM_SESSION_ID = "e1c2b123e2a9488bab7952aa203caa00"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "1.12.7"
SHELL = "/bin/zsh"
TERM = "xterm-256color"
__CFBundleIdentifier = "com.todesktop.__"

[chat-settings]

[chat-trusted_tools]

[chat-failed_request_ids]
none

[chat-context]
current_profile=default
profiles=
default

global_context=
.amazonq/rules/**/*.md
README.md
AmazonQ.md

profile_context=none

files=none
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.