Repository navigation
Edit a command in the permission card before approving it #509
Description
Source: research round 18, stolen from Devin Local (changelog 2026-07-29, docs.devin.ai/desktop/changelog).
Devin's permission cards let you click the command to edit it before approving, plus a "wand" action that takes a plain-language change request and has a fast model rewrite the command for your review.
Why this matters for Solenta: today the answer set is approve / reject / allow-always (#477, #479). Real-world approvals are often "yes, but": the agent proposed rm -rf dist && npm build and you want to approve only npm build. Editing in place is faster than rejecting and re-prompting, and it teaches the adapter nothing spurious.
Scope:
- Permission card: make the proposed command an editable text field; approving runs the edited command, not the original.
- Record both original and edited command in the audit trail (Governance layer: per-agent permission matrix, OS sandbox profiles, audit trail #262) so the transcript shows the human amended the action.
- Optional later: the wand rewrite (fast model applies a NL edit instruction to the command). Nice-to-have, not required for v1.
- Interaction with Allow-always is a command prefix, not the whole tool #479: allow-always after an edit should key on the edited command's prefix, never the original.
Pairs with #291 (unified approval inbox) since edited-approve must work from the inbox too.
Activity
currentbits commentedon Aug 20, 2026
Implemented on
coder/fork-edit-a-command-in-the-permission-ca-0b8a50.v1 (no wand):
threads.respondPermissiontakesupdatedCommand. The runner merges it intocommand/cmd/scriptonly, so Edit/Write cannot grow a command by accident. Empty edits throw without consuming the prompt.Allowed (edited): rm -rf dist && npm build → npm build.addRules.ruleContenton the edited prefix (npm build:*), never the original and never whole-tool. Unedited Accept all is still whole-tool — that's Allow-always is a command prefix, not the whole tool #479.Inbox (#291) should call the same IPC with
threadId+updatedCommand;PermissionPromptin ThreadView is the card to extract.currentbits commentedon Aug 20, 2026
Shipped in this thread: editable command on the permission card, original+edited audit event, allow-always after edit keys the edited prefix. Wand rewrite left for a follow-up.
Untrack core/dist symlink swept in by the #509 merge