[DOCS] Contradiction on Bash Permission Wildcards

Resolved 💬 2 comments Opened Jan 12, 2026 by coygeek Closed Jan 19, 2026

Documentation Type

Incorrect/outdated documentation

Documentation Location

docs/en/settings.md

Section/Topic

Permission settings (Table row for allow and deny)

Current Documentation

In docs/en/settings.md, the table description for allow and deny rules currently states:

Note: Bash rules use prefix matching, not regex

What's Wrong or Missing?

The documentation in settings.md is outdated and contradicts both the IAM documentation and the Changelog. It implies that only prefix matching is supported, failing to mention that wildcard support was added in version 2.1.0.

Evidence of the feature exists in:

  1. docs/en/iam.md: States "Bash permission rules support both prefix matching with : and wildcard matching with "
  2. main/CHANGELOG.md (v2.1.0): States "Added wildcard pattern matching for Bash tool permissions using * at any position"

Suggested Improvement

Update the notes in docs/en/settings.md to reflect that wildcard matching is supported, even if full Regex is not.

Suggested text:

Array of permission rules to allow/deny tool use. Note: Bash rules support prefix matching (:*) and wildcard matching (*), but do not support full regex.

Impact

Medium - Makes feature difficult to understand

Additional Context

Users relying solely on the Settings reference page may believe they cannot use wildcard patterns (e.g., Bash(* install)), despite the feature being available since v2.1.0.

View original on GitHub ↗

This issue has 2 comments on GitHub. Read the full discussion on GitHub ↗