aws / aws/amazon-q-developer-cli

--trust-all-tools no longer works with the default agent in non-interactive mode

Open
#3,751 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
2k
Forks
439
PR merge metrics
No merged PRs in 30d

Description

### Checks

- [x] I have searched [github.com/aws/amazon-q-developer-cli/issues](https://github.com/aws/amazon-q-developer-cli/issues?q=) and there are no duplicates of my issue
- [x] I have run `q doctor` in the affected terminal session
- [x] I have run `q restart` and replicated the issue again

### Operating system

Linux 6.12.79-101.147.amzn2023.aarch64 - Amazon Linux 2023.11.20260413

### Expected behaviour

When using `--trust-all-tools` with `--non-interactive` I expect all tools to work without an interactive prompt. I have audited the tools I use and accept the risk of this configuration. It used to work this way.

### Actual behaviour

```
$ kiro-cli chat --trust-all-tools --no-interactive
All tools are now trusted (!). Kiro will execute tools without asking for confirmation.
Agents can sometimes do unexpected things so understand the risks.

Learn more at https://kiro.dev/docs/cli/chat/security/#using-tools-trust-all-safely

>
[tries to run a bash command]

Command execute_bash is rejected because it matches one or more rules on the denied list:
- non-interactive mode (no user to approve)
```

What is this denied list and how can I influence it? The error message is confusing and the change broke my workflow.

### Steps to reproduce

Yes, see above.

### Environment

```yaml

[q-details]
version = "2.0.0"
hash = "0026b0505ef7bc2b10780c7bdb57813e5d949747"
date = "2026-04-13T09:05:23.535276Z (1d ago)"
variant = "minimal"

[system-info]
chip = "Neoverse-V1"
total-cores = 8
memory = "15.31 GB"

[system-info.os.linux]
kernel_version = "6.12.79-101.147.amzn2023.aarch64"
id = "amzn"
name = "Amazon Linux"
pretty_name = "Amazon Linux 2023.11.20260413"
version_id = "2023"
version = "2023"
variant = "internal"

[environment]
cwd = "/local/home/USER/ddbc-rest"
cli-path = "/local/home/USER/ddbc-rest"
os = "Linux"
shell-path = "/local/home/USER/.toolbox/tools/toolbox/1.1.4161.0/toolbox-exec"
shell-version = "5.2.15"
install-method = "toolbox"
in-ssh = true

[env-vars]
PATH = "/home/USER/.local/share/mise/installs/node/24.14.0/bin:/home/USER/.local/share/mise/installs/python/3.12.13/bin:/home/USER/.local/share/mise/installs/python/3.11.15/bin:/home/USER/.local/share/mise/installs/python/3.10.20/bin:/home/USER/.local/share/mise/installs/python/3.9.25/bin:/home/USER/.local/share/mise/installs/python/3.8.20/bin:/home/USER/.toolbox/bin:/home/USER/.toolbox/bin:/home/USER/.cargo/bin:/home/USER/.local/bin:/home/USER/bin:/usr/local/bin:/usr/bin:/usr/local/sbin:/usr/sbin"
SHELL = "/bin/bash"
TERM = "screen"
XDG_SESSION_TYPE = "tty"
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.