Summary
git push (and likely other remote-write commands) are blocked when executed through DevSpace'"'"'s bash tool, even in checkout mode with properly authorized workspace roots.
Environment
- DevSpace v1.0.0
- Windows 11 + Node.js v24.12.0
- ChatGPT (Plus) as MCP client, connected via Cloudflare Tunnel
- Source code in regular Git repo (not worktree), on
main branch, 1 commit ahead of origin/main
Steps to reproduce
- Set up DevSpace with a Git repo inside
allowedRoots
- Connect ChatGPT via MCP tunnel, approve Owner password
- Ask ChatGPT to open the project in checkout mode
- Make a commit (
git add + git commit work fine)
- Ask ChatGPT to
git push origin main
Expected behavior
git push succeeds, same as git add / git commit.
Actual behavior
ChatGPT reports that the push is blocked by the host safety layer. Verified by reading pi-coding-agent/dist/core/tools/bash.js -- no command allowlist/denylist exists in the tool. The block happens at the ChatGPT/OpenAI host level, where remote-write operations are treated as unsafe.
git add / git commit (local writes) work. git push (remote write) does not.
Workaround
Push from a local terminal directly:
cd <project-dir>
git push origin main
Possible fix direction
The pi-tools.ts default bash timeout is 30 seconds (max 300), which can also cause git push to time out on slow connections. But the primary blocker is the host safety policy -- this may need documentation or a way to signal approved remote commands.
Summary
git push(and likely other remote-write commands) are blocked when executed through DevSpace'"'"'s bash tool, even in checkout mode with properly authorized workspace roots.Environment
mainbranch, 1 commit ahead oforigin/mainSteps to reproduce
allowedRootsgit add+git commitwork fine)git push origin mainExpected behavior
git pushsucceeds, same asgit add/git commit.Actual behavior
ChatGPT reports that the push is blocked by the host safety layer. Verified by reading
pi-coding-agent/dist/core/tools/bash.js-- no command allowlist/denylist exists in the tool. The block happens at the ChatGPT/OpenAI host level, where remote-write operations are treated as unsafe.git add/git commit(local writes) work.git push(remote write) does not.Workaround
Push from a local terminal directly:
Possible fix direction
The
pi-tools.tsdefault bash timeout is 30 seconds (max 300), which can also causegit pushto time out on slow connections. But the primary blocker is the host safety policy -- this may need documentation or a way to signal approved remote commands.