Permissions

Permissions control file edits, shell commands, and web access. They can be set globally or per‑agent.

Permission types

• edit
• bash (supports wildcard patterns)
• webfetch
• external_directory

Each can be set to:

• allow
• ask
• deny

When prompted, you can allow once, always, or reject for the current session.

Example (agent)

---
permission:
  edit: ask
  bash:
    "*": ask
  webfetch: deny
---

Example (config)

{
  "permission": {
    "edit": "ask",
    "webfetch": "ask",
    "bash": {
      "*": "ask",
      "git *": "allow"
    }
  }
}