Skip to content

Support persistent, path-scoped write approvals in  permissions-config.json #4682

Description

@nicholasdinchev-vogel

Describe the feature or problem you'd like to solve

Currently the  write  approval kind is all-or-nothing per repo location; there's no way to durably pre-approve edits to specific files/globs (e.g.,  docs/REPRODUCTION.md ,  docs/decisions/* ) the way  --allow-tool='write(path)'  scopes it for a single session. This matters for repos with agent-maintained docs that get edited on every task alongside human-reviewed code changes.

Proposed solution

No response

Example prompts or workflows

No response

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:configurationConfig files, instruction files, settings, and environment variablesarea:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions