4 ms·
Yeah I don't know why they didn't figure to have something in between. I find it completely unusable without the flag. Even a --permit-reads would help a lot
by andoando 7mo ago
Yeah I don't know why they didn't figure to have something in between. I find it completely unusable without the flag.
Even a --permit-reads would help a lot
- dang 7mo agoI have the same experience as you and joegibbs. I imagine it's really hard to find an adequate in-between that works in general. (Edit: but it also feels like a CYA thing.)
- ryan14975 7mo agoThe settings.json allowlist gives you exactly this kind of granularity. You can permit specific tool patterns like Read, Glob, Grep, Bash(git *) while keeping destructive operations gated. It's not as discoverable as a CLI flag but it's been working well for me for unattended sessions.