allowedCommands per profile - existing plans or past discussions

[ewann]

I'd like to be able to configure something like:

{
     "name": "my-profile",
     "settings": {
       "defaultProvider": "gemini"
     },
     "ephemeralSettings": {
       "model": "gemini-2.5-pro"
     },
     "tools": {
       "allowed": ["run_shell_command", "read_file"],
       "disabled": ["write_file"]
     },
     "allowedCommands": ["ls -la", "npm install", "git status"]
   }

My current understanding is this isn't possible:

1. Am I correct?
2. Has it been discussed in the past? I didn't find that but...
3. Is there any existing plan to implement this?
4. Any observations / comments?

thanks!

[acoliver]

I see thus hasn't made the documentation. There are both ephemerals and slash commands for this and they are saved in the profile. I'll update the docs tomorrow.

For now look at /set menu and /tools menu.

[ewann]

Thanks for looking at this.

Building locally and running from:
43b97dbf452a24073617011b326622aa74ad1625
I observed the following:

/set doesn't return a command, though I see it and can select it from /se

I'm not sure that /tools is what I'm asking about:

"tools": {
       "allowed": ["run_shell_command", "read_file"],
       "disabled": ["write_file"]
     },

Works fine. But:

"allowedCommands": ["ls -la", "npm install", "git status"]

(or similar) doesn't appear to exist - noting that it is not a security enforcement but more a 'politeness' instruction, what I'm trying to do is:

• persistently specify a Shell command(s) that can be launched without user interaction / prompt
• persistently specify a Shell command(s) that cannot be launched and should be denied without prompt

The bigger picture: I'm attempting to implement a Supervisor / Subagent approach, where I can avoid enabling YOLO mode & persistently allow-list commands without having to ok individual command prompts. It's possible there is an alternative way to achieve this, but I don't know / understand it.

With that in mind, are /set & /tools still the correct knobs to turn here?

TIA

[acoliver]

Oh yes we dont have that presently. Cursor/Windsurf style allow/deny lists saved in profiles. It's still all or none for shell command or not.