Skip to content

Need more granular agent tool whitelisting. #2921

@JoonasLiik

Description

@JoonasLiik

Describe the feature or problem you'd like to solve

i want to whitelist "mvn test" and its various sub options but not allow "mvn install" "mvn publish" etc.

Proposed solution

Many command line tools, for example maven, git have a variety of subcommands. some of these are super safe, others can be so dangerous you simply must manually review every single use.

When whitelisting provide an option to take into account the subcommand as well.
so you can whitelist e.g. git status or git log but not git push.

Additionally agents often produce command pipelines, like piping a command into tail to suppress the built in pager or limit results. This is effectively a completely separate command.
I would like to whitelist "git log" and "tail" separately and have it apply to pipelines automatically.
i would never whitelist "git" and "tail" because i do not want "git push" to be allowed by accident.

Example prompts or workflows

Please review last 3 commits.
Agent would use "git log" to figure out what the last commits were.

Agent does some code change, runs mvn test -Dtest to sanity check results, often iterating many times.

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions
    No fields configured for Feature.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions