Post

Me: "Please update my .gitignore" AI: "Sure, and I'll commit and push to GitHub"

Do they implicitly have this permission? Or you have to have granted it in the past?

I granted Git commands but I only thought it was log and diff

In this case though it was just Git on terminal, which is probably why it was more open ended in its control

I've seen a lot of inconsistency with "yeah you can run calls like these" — Junie being probably the worst at this. But at least it's easy to access their allowlist... Which then has weird regex syntax which I can't get to work according to the inbuilt tester. And I speak regex. Docs don't help

With Claude Code I am never really sure what will be allowed and what won't, but at least so far it has ALWAYS asked to invoke git. Antigravity seems to avoid invoking git unless explicitly asked.