diff options
| -rw-r--r-- | packages/web/src/content/docs/permissions.mdx | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/packages/web/src/content/docs/permissions.mdx b/packages/web/src/content/docs/permissions.mdx index dd359ee89..1aea3ef74 100644 --- a/packages/web/src/content/docs/permissions.mdx +++ b/packages/web/src/content/docs/permissions.mdx @@ -132,6 +132,18 @@ The wildcard uses simple regex globbing patterns. --- +#### Scope of the `"ask"` option + +When the agent asks for permission to run a particular bash command, it will +request feedback with the three options "accept", "accept always" and "deny". +The "accept always" answer applies for the rest of the current session. + +In addition, command permissions are applied to the first two elements of a command. So, an "accept always" response for a command like `git log` would whitelist `git log *` but not `git commit ...`. + +When an agent asks for permission to run a command in a pipeline, we use tree sitter to parse each command in the pipeline. The "accept always" permission thus applies separately to each command in the pipeline. + +--- + ### webfetch Use the `permission.webfetch` key to control whether the LLM can fetch web pages. |