Agent Permissions Manager

Unified permission management across three AI CLI tools:

Claude Code: ~/.claude/settings.json
Gemini CLI: ~/.gemini/settings.json
Codex CLI: ~/.codex/config.toml

Format Differences

Each tool uses a different rule format. When converting a command (e.g., git log):

Tool	Allow example	Deny example
Claude Code	`Bash(git log *)`	entry in `permissions.deny`
Gemini CLI	`git log`	entry in `sandbox.blockedCommands`
Codex CLI	`^git log( .*)?$` with `decision = "allow"`	same pattern with `decision = "forbidden"`

Use scripts/permissions.sh for all reads and writes — never hand-edit the TOML/JSON directly without it, as TOML [[shell_rules]] arrays require careful handling.

Workflow

View current permissions

Run:

sh ~/.agents/skills/xr-agent-permissions/scripts/permissions.sh show

This prints a unified table of allow/deny rules across all three tools.

Add a rule

Ask the user for:

The command pattern (e.g., git log, or a full regex/glob if they're specific)
The decision: allow or deny

Then run:

sh ~/.agents/skills/xr-agent-permissions/scripts/permissions.sh add --command "git log" --decision allow
sh ~/.agents/skills/xr-agent-permissions/scripts/permissions.sh add --command "curl" --decision deny

The script auto-converts the command into each tool's native format.

Remove a rule

Ask the user which command to remove and from which decision list (allow/deny):

sh ~/.agents/skills/xr-agent-permissions/scripts/permissions.sh remove --command "git log" --decision allow

Sync (overwrite all rules)

When the user provides a full list of allow/deny rules to replace the existing ones:

sh ~/.agents/skills/xr-agent-permissions/scripts/permissions.sh sync \
  --allow "git log" "git status" "npm run" \
  --deny "sudo" "rm -rf" "curl"

This replaces only the permission-managed entries in all three config files, leaving other settings untouched.

Conversion Rules

When the user provides a plain command string, convert as follows:

Claude Code (permissions.allow / permissions.deny):

Prefix with Bash( and append *) for commands that take arguments
Single-word commands with no typical args: Bash(whoami), Bash(pwd)
Example: git log → Bash(git log *)

Gemini CLI (sandbox.allowedCommands / sandbox.blockedCommands):

Use the plain command string as-is (prefix match)
Example: git log → "git log"

Codex CLI ([[shell_rules]] with pattern + decision):

Wrap in ^...$ regex, append ( .*)? to allow optional arguments
Example: git log → ^git log( .*)?$
allow → decision = "allow", deny → decision = "forbidden"

After Changes

Always run show after making changes so the user can verify the result:

sh ~/.agents/skills/xr-agent-permissions/scripts/permissions.sh show