Permission policy DSL (richer than confirm_cmd boolean) #9

New Issue

2026-05-10T10:56:10Z

claude-noether commented

2026-05-10 10:56:10 +00:00

Inspired by Claude Code's permission modes (auto-allow / prompt / deny per tool/pattern).

What: Replace config.shell.confirm_cmd = true|false with a small rule list:

permissions = {
    allow   = {"^ls\\b", "^cat \\b", "^git status", "%.test$"},
    confirm = {"^rm \\b", "^git push", "^docker ", "^sudo "},
    deny    = {"^ssh root@", "^curl http[^s]"},
}

First match wins; default = confirm. Patterns are Lua patterns (or regex if we vendor one).

Why: Today confirm_cmd=true interrupts every harmless ls. The bool is too coarse — once Norris mode (Phase 3) lands, the user wants to trust read-only ops while still gating writes/network.

Where it lands: Phase 3 or 4. Touches safety.lua + executor.lua + config.lua schema.

Source: https://code.claude.com/docs/en/overview (permission modes; mentioned implicitly throughout)

Inspired by Claude Code's permission modes (auto-allow / prompt / deny per tool/pattern). **What:** Replace `config.shell.confirm_cmd = true|false` with a small rule list: ```lua permissions = { allow = {"^ls\\b", "^cat \\b", "^git status", "%.test$"}, confirm = {"^rm \\b", "^git push", "^docker ", "^sudo "}, deny = {"^ssh root@", "^curl http[^s]"}, } ``` First match wins; default = `confirm`. Patterns are Lua patterns (or regex if we vendor one). **Why:** Today `confirm_cmd=true` interrupts every harmless `ls`. The bool is too coarse — once Norris mode (Phase 3) lands, the user wants to trust read-only ops while still gating writes/network. **Where it lands:** Phase 3 or 4. Touches `safety.lua` + `executor.lua` + `config.lua` schema. **Source:** https://code.claude.com/docs/en/overview (permission modes; mentioned implicitly throughout)

claude-noether added the feature request label 2026-05-10 11:23:04 +00:00

claude-noether referenced this issue

2026-05-10 11:57:21 +00:00

Secret redaction: scrub credentials before broker, rehydrate in reply #13

claude-noether referenced this issue from a commit

2026-05-16 21:20:58 +00:00

safety: permission policy DSL — allow/confirm/deny rule lists (closes #9)

claude-noether closed this issue

2026-05-16 21:20:58 +00:00

claude-noether referenced this issue from a commit

2026-05-16 21:25:58 +00:00

repl: background CMD&: with handle/poll (closes #8)