Skip to content

permissions.md

Latest commit

 

History

History
39 lines (27 loc) · 928 Bytes

permissions.md

File metadata and controls

39 lines (27 loc) · 928 Bytes

Permissions

The Autohand CLI asks before running shell commands, writing files, or taking sensitive actions. The SDK surfaces those requests as permission_request events.

Recommended Default

Keep permission handling interactive unless your host has a clear trust boundary:

sdk.set_permission_mode("interactive");

Responding To Requests

if (event.type == "permission_request") {
  sdk.permission_response(event.request_id(), "allow_once");
}

Common decisions:

  • allow_once
  • deny_once

Agent Helpers

agent.allow_permission(request_id);
agent.deny_permission(request_id);

Production Guidance

  • Show the tool name and description to the user.
  • Deny by default when request context is missing.
  • Avoid blanket approval for file writes or shell commands.
  • Strip secrets from logs before attaching them to issues.
  • Use plan mode for discovery before allowing writes.