[BUG] Auto mode classifier blocks reading .env.prod inconsistently across sessions, even on explicit user request
Status Open
Maintainer reply None cached
Workaround ✓ Mentioned in description ↑
Activity 0 comments · opened Sep 28, 2026
What happened
In auto mode, the assistant was asked to read .env.prod to get the prod DB connection variable
for a DB update the user had approved. Every attempt was denied by the auto mode classifier:
- names-only grep of .env* → "[Modify Shared Resources]"
- names-only grep of .env.prod, after the user explicitly said to check it → "[Production Deploy]"
The same action works in the user's other sessions, so the user cannot predict when it will be
blocked. An explicit user instruction does not clear the denial, and the only workaround is
leaving auto mode or running the command manually with !.
Expected
Either a consistent verdict for the same action, or an in-session way for the user to approve it
(a permission prompt) instead of a hard deny.
Environment
- Date: 2026-09-28
- macOS (Darwin 25.6.0), zsh
- Permission mode: auto