Permission System

[permissions]
auto_approve = [
  "file_read",
  "file_search",
  "content_search",
  "directory_list"
]

default_auto_approve = [
  "file_read",
  "file_search",
  "content_search",
  "directory_list"
]

[file_edit] wants to: write to src/user.ex

[y]es / [n]o / [a]lways for this session:

Permission Required

Allow file_edit on src/user.ex?

[Deny] [Allow Once] [Allow Always]

%PermissionGrant{
  tool: "file_edit",
  scope: "*",  # or specific path
  session_id: "abc123...",
  granted_at: ~U[2026-02-28 10:30:00Z]
}

loom --yes "refactor the authentication module"

Loom.Permissions.Manager.check("file_edit", "lib/user.ex", session_id)
# Returns: :allowed | :denied | :ask

Loom.Permissions.Manager.grant("shell", "*", session_id)
# Stores grant in database

Loom.Permissions.Manager.is_auto_approved?("file_read")
# Returns: true | false

Loom.Permissions.Manager.tool_category("file_edit")
# Returns: :write

Loom.Permissions.Manager.tool_category("shell")
# Returns: :execute

CREATE TABLE permission_grants (
  id UUID PRIMARY KEY,
  tool VARCHAR NOT NULL,
  scope VARCHAR NOT NULL,
  session_id UUID NOT NULL,
  granted_at TIMESTAMP NOT NULL
);

import Ecto.Query

from g in PermissionGrant,
  where: g.session_id == ^session_id,
  where: g.tool == ^tool_name

defmodule MyApp.CustomPermissions do
  def check_custom_policy(tool_name, path, session_id) do
    case tool_name do
      "shell" ->
        # Only allow safe commands
        if safe_command?(path), do: :allowed, else: :ask
        
      "file_write" ->
        # Only allow writes to specific directories
        if writable_dir?(path), do: :allowed, else: :denied
        
      _ ->
        # Delegate to default policy
        Loom.Permissions.Manager.check(tool_name, path, session_id)
    end
  end
end

[permissions]
auto_approve = ["file_read", "content_search"]