[Bug] Command chain of pre-approved tools incorrectly requires auth

Resolved 💬 7 comments Opened Mar 8, 2026 by peterdrier Closed Apr 13, 2026

Bug Description
This command required auth, even though grep, wc, echo, read, head are all pre-approved. I get that chaining things together is more efficient, but the logic for permissioning needs to understand that a chain of all approved commands is also pre-approved.

This is especially annoying of late, as CC seems to want to prepend every command with a "cd <current directory>", which breaks all pre-approved auth.

cd "H:/source/foo" &&
grep -rn "TODO\|FIXME\|HACK\|XXX\|WORKAROUND" --include=".cs" --include=".razor" --include=".ts" --include=".js" 2>/dev/null | wc -l &&
echo "---" &&
grep -rn "TODO\|FIXME\|HACK\|XXX\|WORKAROUND" --include=".cs" --include=".razor" --include=".ts" --include=".js" 2>/dev/null | head -30

Environment Info

  • Platform: win32
  • Terminal: windows-terminal
  • Version: 2.1.71
  • Feedback ID: 3238b1dd-0856-4981-b701-05479136c68e

Errors

[]

View original on GitHub ↗

This issue has 7 comments on GitHub. Read the full discussion on GitHub ↗