Add Read+Write allowlists

[nh2]

Is your feature request related to a problem? Please describe.

For commands I can allow specific commands, but for files so far I cannot.

Having that would allow the agent to e.g. write notes files without prompting the user, without requiring full workspace-level write permissions (which are more risky to give).

Describe the solution you'd like

Allow configuring reads/writes to specific files (or gitignore style file patterns).

[martin-rueegg]

Could this be extended to have also include files/directories OUTSIDE the current project/workspace?

When writing plugins, you often do not have the application's full source code within your project, but outside and it needs to be consulted often so understand APIs or the application's internals. Symlinking the application into the project source, causes different issues (search may now hit things you don't want to find, WSL does NOT follow symlinks if your IDE accesses it from Windows).

[nh2]

Could this be extended to have also include files/directories OUTSIDE the current project/workspace?

@martin-rueegg Yes, my linked PR #1274 already implements that.

[martin-rueegg]

Could this be extended to have also include files/directories OUTSIDE the current project/workspace?

@martin-rueegg Yes, my linked PR #1274 already implements that.

Amazing. Thank you.

On a side note: the command allowlist does not quote backslashes (\) correctly. So when you add a windows command, the all the backslashes get munged and its just onelongpathtothecommand, rather than one\long\path\to\the\command. Maybe this happens here too? (sorry, I have not gone through the source of your PR).

also, while on the command side I would love to see regex support (matching command arguments or different path prefixes), i think for the files a normal globbing (as you seem to have implemented by the looks of the screenshots) might suffice!

Thanks again!

[nh2]

@martin-rueegg Command allowlisting is currently super unsafe, see this Roo issue which doesn't have a Zoo equivalent but probably should:

• [ENHANCEMENT] Provide auto-execute for EXACT commands (prefix is inherently unsafe) RooCodeInc/Roo-Code#11095

Indeed file checking is much easier.