sst
feat: allow writes to /tmp by default without permission prompt
Add Filesystem.isAllowedPath() helper that allows access to project directory, os.tmpdir(), and /tmp without prompting for external directory permission.
Fixes #5386 Fixes #4743
Can we make it optional for this from the configuration like the following?
"permission": {
"external_directory": {
"env:$TMPDIR/test": "allow",
"*": "deny",
}
}
@jiyeol-lee Why would you like to make it optional? Do you want to prevent the LLM to write to /tmp?
that's what I was wondering too but letting people override that perm in general makes sense, best done in separate pr tho
@jiyeol-lee Why would you like to make it optional? Do you want to prevent the LLM to write to /tmp?
@remorses @rekram1-node Yes, I don't want LLM to write, especially read /tmp. I usually have multiple credentials in there temporary and I don't want LLM read things that I didn't expect to do. It would be amazing if we make it configurable by the individual user unless it's a project directory.