permissions

Manage the interactive permission system — create policies, review audit trails, and test risk classification.

Commands

permissions list

Show all stored permission policies.

bash
mayros permissions list

permissions add <pattern>

Create a new permission policy.

bash
mayros permissions add "git commit*" --kind always_allow --type glob
mayros permissions add "npm publish" --kind ask --type exact --risk medium
mayros permissions add "rm -rf.*" --kind always_deny --type regex
OptionDescriptionDefault
--kindalways_allow, always_deny, askask
--typeexact, glob, regexexact
--riskMaximum risk level for this policy—

permissions remove <id>

Delete a permission policy by ID.

bash
mayros permissions remove policy-1234-1

permissions audit

Show recent permission decisions.

bash
mayros permissions audit
mayros permissions audit --limit 50

Each entry shows: tool name, command, risk level, decision, source, and timestamp.

permissions classify <command>

Test the risk classifier on a command without executing it.

bash
mayros permissions classify "git push --force origin main"
# → Risk: high — Matched: git push --force, git push -f

permissions status

Show current configuration and statistics.

bash
mayros permissions status

Displays: mode, auto-approve setting, policy count, recent decision count.