Permissions

Set every tool and shell command to allow, ask or deny, commit the policy to your repo, and undo any change the agent makes with /undo and /redo.

Permissions decide what Assumer may do without asking. Each tool can be set to:

• allow: run without asking.
• ask: show the call and wait for your approval.
• deny: never run.

Rules per shell command

The bash tool accepts patterns, so you can allow safe commands and keep risky ones behind approval:

{
  "permission": {
    "edit": "ask",
    "bash": {
      "git status": "allow",
      "git diff*": "allow",
      "npm test*": "allow",
      "rm *": "deny",
      "*": "ask"
    },
    "webfetch": "ask"
  }
}

Save this in assumer.json at the root of your project and commit it, so every developer and every session follows the same policy. See Configuration.

Undo and redo

Every change is tracked. Use /undo to revert the last change and /redo to re-apply it. Use /diff to review pending changes before you commit.

Trusting a project

Project-level configuration, plugins and MCP servers only run after you trust the directory:

assumer trust