Support persistent, path-scoped write approvals in permissions-config.json
Nobody has claimed this yet.
- Dominant language
- Shell
- Stars
- 11.2k
- Forks
- 1.9k
- Avg merge
- 14h 16m
- Merged PRs (30d)
- 6
Description
Describe the feature or problem you'd like to solve
Currently the write approval kind is all-or-nothing per repo location; there's no way to durably pre-approve edits to specific files/globs (e.g., docs/REPRODUCTION.md , docs/decisions/* ) the way --allow-tool='write(path)' scopes it for a single session. This matters for repos with agent-maintained docs that get edited on every task alongside human-reviewed code changes.
Proposed solution
No response
Example prompts or workflows
No response
Additional context
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the permissions-config.json handling and the --allow-tool='write(path)' entry point, then trace how write approvals are stored and checked. Done means path or glob approvals persist in the configuration, scope write access as requested, and preserve existing all-or-nothing behavior where no scope is configured.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- shell
- Domain
- authorization, cli
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100