Skip to content

git push blocked by ChatGPT host safety layer via DevSpace bash tool #20

@ChaoXianGaoGuan

Description

@ChaoXianGaoGuan

Summary

git push (and likely other remote-write commands) are blocked when executed through DevSpace'"'"'s bash tool, even in checkout mode with properly authorized workspace roots.

Environment

  • DevSpace v1.0.0
  • Windows 11 + Node.js v24.12.0
  • ChatGPT (Plus) as MCP client, connected via Cloudflare Tunnel
  • Source code in regular Git repo (not worktree), on main branch, 1 commit ahead of origin/main

Steps to reproduce

  1. Set up DevSpace with a Git repo inside allowedRoots
  2. Connect ChatGPT via MCP tunnel, approve Owner password
  3. Ask ChatGPT to open the project in checkout mode
  4. Make a commit (git add + git commit work fine)
  5. Ask ChatGPT to git push origin main

Expected behavior

git push succeeds, same as git add / git commit.

Actual behavior

ChatGPT reports that the push is blocked by the host safety layer. Verified by reading pi-coding-agent/dist/core/tools/bash.js -- no command allowlist/denylist exists in the tool. The block happens at the ChatGPT/OpenAI host level, where remote-write operations are treated as unsafe.

git add / git commit (local writes) work. git push (remote write) does not.

Workaround

Push from a local terminal directly:

cd <project-dir>
git push origin main

Possible fix direction

The pi-tools.ts default bash timeout is 30 seconds (max 300), which can also cause git push to time out on slow connections. But the primary blocker is the host safety policy -- this may need documentation or a way to signal approved remote commands.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions