Project Tool Allowlist

Generate a project-local permission allowlist from a repo's detected tooling so the running agent can run its dev commands without prompting each time.

Workflow

1. Identify the target folder (default: current working directory) and the git scope the user wants (read-only, safe, or all; default safe).
2. Identify the current client — do not assume Claude. The detector auto-detects from inherited env (--client auto, the default): CLAUDECODE/ CLAUDE_CODE_* → Claude, CODEX_* → Codex, else unknown. It prints the resolved client on stderr. Each client has a different target:
   • Claude Code → write .claude/settings.local.json (or .claude/settings.json with --shared).
   • Codex → project-trust block the user appends to ~/.codex/config.toml (agent can't write it).
   • Anything else → see "Unknown client" below.