Allowlist spawn_dev.py for the office CTO, or keep transcribing? nf-npax ← Beads

closed priority 2 task unassigned needs:direction

Twinned from https://github.com/cfsh/ninefold/issues/561 by tools/beads/import_github.py's reconcile pass.

#558 adds tools/office/spawn_dev.py, a single entry point for standing up a dev session. Wiring it into the office CTO's flow needs one line in cfsh/nf-office's .claude/settings.json — and only you can add it.

A. Grant it. "Bash(/home/cobal/nf/ninefold/tools/office/spawn_dev.py:*)". One line replaces the current per-command patterns (Bash(tmux new:*), a Write scoped to one filename). ⚠ This is genuinely wider than what it replaces: a subprocess the script spawns is not classified separately, so the grant covers the whole flow at once. What holds it narrow is that the script's denials are pinned by tests — no skip-permissions flag, never types into another agent's pane, Bash(tmux send-keys:*) stays in deny.

B. Don't. The CTO keeps running ./tools/office/spawn_dev.py <topic> --dry-run and transcribing the output by hand. Nothing is lost but the automation — though transcription is the failure mode #557 exists to fix.

Recommended: A, since B leaves the original hand-transcription risk in place.

Default ships if unanswered — nothing is blocked on this. Unanswered means B: no grant, and the office repo stays exactly as it is today.

> ⚠ Updated 2026-08-05. This originally said *"recommended: A, once F2 and F3 are fixed"* — F2 (the write-set claim was wider than the tests checked) and F3 (--dry-run omitted the setup steps, so option B was incomplete) were both fixed in 32bb470, and verified. The recommendation is now unconditional. #558 itself is still open on an unrelated defect; that does not bear on this question.

Dependencies

None.

Comments

No comments.

Add a comment