Add auto_approve_all_tools config

Author: rizwan3d

NanoAgent.Tests/Application/Permissions/ToolPermissionEvaluatorTests.cs

@@ -962,6 +962,60 @@ public void Evaluate_Should_DenyEscalatedSandboxRequest_When_JustificationIsMiss
         result.ReasonCode.Should().Be("sandbox_justification_required");
     }
 
+    [Fact]
+    public void Evaluate_Should_AllowPromptedTools_When_AutoApproveAllToolsIsEnabled()
+    {
+        ToolPermissionEvaluator sut = new(
+            new StubWorkspaceRootProvider(_workspaceRoot),
+            ApplicationSettingsFactory.CreatePermissionSettings(new ApplicationOptions
+            {
+                Permissions = new PermissionSettings
+                {
+                    AutoApproveAllTools = true
+                }
+            }));
+
+        PermissionEvaluationResult result = sut.Evaluate(
+            new ToolPermissionPolicy
+            {
+                ApprovalMode = ToolApprovalMode.RequireApproval,
+                ToolTags = ["custom"]
+            },
+            new PermissionEvaluationContext(CreateContext("{}", toolName: "custom__status")));
+
+        result.IsAllowed.Should().BeTrue();
+        result.EffectiveMode.Should().Be(PermissionMode.Allow);
+    }
+
+    [Fact]
+    public void Evaluate_Should_PreserveBuiltInDenyRules_When_AutoApproveAllToolsIsEnabled()
+    {
+        ToolPermissionEvaluator sut = new(
+            new StubWorkspaceRootProvider(_workspaceRoot),
+            ApplicationSettingsFactory.CreatePermissionSettings(new ApplicationOptions
+            {
+                Permissions = new PermissionSettings
+                {
+                    AutoApproveAllTools = true
+                }
+            }));
+
+        PermissionEvaluationResult result = sut.Evaluate(
+            new ToolPermissionPolicy
+            {
+                ToolTags = ["bash"],
+                Shell = new ShellCommandPermissionPolicy
+                {
+                    CommandArgumentName = "command",
+                    AllowedCommands = ["rm"]
+                }
+            },
+            new PermissionEvaluationContext(CreateContext("""{ "command": "rm -rf ." }""", toolName: AgentToolNames.ShellCommand)));
+
+        result.Decision.Should().Be(PermissionEvaluationDecision.Denied);
+        result.ReasonCode.Should().Be("permission_policy_denied");
+    }
+
     public void Dispose()
     {
         if (Directory.Exists(_workspaceRoot))

NanoAgent.Tests/Infrastructure/Configuration/ApplicationSettingsFactoryTests.cs

@@ -14,6 +14,7 @@ public void PermissionShortcuts_Should_BindFromSnakeCaseConfigurationKeys()
         IConfigurationRoot configuration = new ConfigurationBuilder()
             .AddInMemoryCollection(new Dictionary<string, string?>
             {
+                ["Application:Permissions:auto_approve_all_tools"] = "true",
                 ["Application:Permissions:file_read"] = "Allow",
                 ["Application:Permissions:file_write"] = "Ask",
                 ["Application:Permissions:file_delete"] = "Ask",
@@ -30,6 +31,7 @@ public void PermissionShortcuts_Should_BindFromSnakeCaseConfigurationKeys()
         ApplicationOptions options = new();
         configuration.GetSection(ApplicationOptions.SectionName).Bind(options);
 
+        options.Permissions.AutoApproveAllTools.Should().BeTrue();
         options.Permissions.FileRead.Should().Be(PermissionMode.Allow);
         options.Permissions.FileWrite.Should().Be(PermissionMode.Ask);
         options.Permissions.FileDelete.Should().Be(PermissionMode.Ask);
@@ -109,4 +111,37 @@ public void CreatePermissionSettings_Should_CompileShortcutSettingsIntoRules()
             rule.Tools.SequenceEqual(new[] { "bash" }) &&
             rule.Patterns.SequenceEqual(new[] { "curl*|*sh*" })).Should().BeTrue();
     }
+
+    [Fact]
+    public void CreatePermissionSettings_Should_AddBroadAllowRule_When_AutoApproveAllToolsIsEnabled()
+    {
+        PermissionSettings settings = ApplicationSettingsFactory.CreatePermissionSettings(new ApplicationOptions
+        {
+            Permissions = new PermissionSettings
+            {
+                AutoApproveAllTools = true
+            }
+        });
+
+        settings.AutoApproveAllTools.Should().BeTrue();
+        settings.DefaultMode.Should().Be(PermissionMode.Allow);
+        settings.Rules.Should().Contain(rule =>
+            rule.Mode == PermissionMode.Allow &&
+            rule.Tools.Length == 0 &&
+            rule.Patterns.Length == 0);
+
+        int broadAllowIndex = Array.FindIndex(
+            settings.Rules,
+            rule => rule.Mode == PermissionMode.Allow &&
+                    rule.Tools.Length == 0 &&
+                    rule.Patterns.Length == 0);
+        int deniedShellIndex = Array.FindIndex(
+            settings.Rules,
+            rule => rule.Mode == PermissionMode.Deny &&
+                    rule.Tools.Contains("bash", StringComparer.OrdinalIgnoreCase) &&
+                    rule.Patterns.Contains("rm -rf*", StringComparer.OrdinalIgnoreCase));
+
+        broadAllowIndex.Should().BeGreaterThanOrEqualTo(0);
+        deniedShellIndex.Should().BeGreaterThan(broadAllowIndex);
+    }
 }

NanoAgent/Application/Commands/ReplCommands/PermissionCommandSupport.cs

@@ -18,6 +18,7 @@ public static string BuildPermissionsSummary(
         return
             "Permissions:\n" +
             $"Default mode: {ToDisplayText(settings.DefaultMode)}\n" +
+            $"Auto approve all tools: {(settings.AutoApproveAllTools ? "On" : "Off")}\n" +
             $"Sandbox mode: {ToDisplayText(settings.SandboxMode)}\n" +
             $"Built-in/configured rules: {configuredRuleCount}\n" +
             $"Session overrides: {sessionRuleCount}\n" +
@@ -43,6 +44,8 @@ public static string BuildRulesListing(
         builder.AppendLine("Effective permission rules:");
         builder.Append("Default mode: ");
         builder.AppendLine(ToDisplayText(settings.DefaultMode));
+        builder.Append("Auto approve all tools: ");
+        builder.AppendLine(settings.AutoApproveAllTools ? "On" : "Off");
         builder.Append("Sandbox mode: ");
         builder.AppendLine(ToDisplayText(settings.SandboxMode));
         builder.AppendLine();

NanoAgent/Application/Models/PermissionSettings.cs

@@ -4,6 +4,9 @@ namespace NanoAgent.Application.Models;
 
 public sealed class PermissionSettings
 {
+    [ConfigurationKeyName("auto_approve_all_tools")]
+    public bool AutoApproveAllTools { get; set; }
+
     public PermissionMode DefaultMode { get; set; } = PermissionMode.Ask;
 
     public PermissionRule[] Rules { get; set; } = [];

NanoAgent/Infrastructure/Configuration/ApplicationSettingsFactory.cs

@@ -45,8 +45,6 @@ internal static class ApplicationSettingsFactory
         "wget*|*sh*"
     ];
 
-    private static readonly PermissionRule[] BuiltInPermissionRules = CreateBuiltInPermissionRules();
-
     public static ConversationSettings CreateConversationSettings(ApplicationOptions options)
     {
         ArgumentNullException.ThrowIfNull(options);
@@ -86,7 +84,8 @@ public static PermissionSettings CreatePermissionSettings(ApplicationOptions opt
 
         return new PermissionSettings
         {
-            DefaultMode = configured.DefaultMode,
+            AutoApproveAllTools = configured.AutoApproveAllTools,
+            DefaultMode = configured.AutoApproveAllTools ? PermissionMode.Allow : configured.DefaultMode,
             FileDelete = configured.FileDelete,
             FileRead = configured.FileRead,
             FileWrite = configured.FileWrite,
@@ -97,16 +96,20 @@ public static PermissionSettings CreatePermissionSettings(ApplicationOptions opt
             Shell = configured.Shell ?? new ShellPermissionSettings(),
             ShellDefault = configured.ShellDefault,
             ShellSafe = configured.ShellSafe,
-            Rules = BuiltInPermissionRules
+            Rules = CreateBuiltInPermissionRules(configured.AutoApproveAllTools)
                 .Concat(CreateShortcutPermissionRules(configured))
                 .Concat(configuredRules)
                 .Select(NormalizeRule)
                 .ToArray()
         };
     }
 
-    private static PermissionRule[] CreateBuiltInPermissionRules()
+    private static PermissionRule[] CreateBuiltInPermissionRules(bool autoApproveAllTools)
     {
+        PermissionMode promptableMode = autoApproveAllTools
+            ? PermissionMode.Allow
+            : PermissionMode.Ask;
+
         return
         [
             new PermissionRule
@@ -117,7 +120,7 @@ private static PermissionRule[] CreateBuiltInPermissionRules()
             new PermissionRule
             {
                 Tools = ["webfetch"],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
@@ -127,55 +130,56 @@ private static PermissionRule[] CreateBuiltInPermissionRules()
             new PermissionRule
             {
                 Tools = ["bash"],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = [AgentToolNames.FileWrite],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = [AgentToolNames.FileDelete],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = [AgentToolNames.ApplyPatch],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = ["edit"],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = ["agent"],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = ["task"],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = ["mcp"],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = ["external_directory"],
-                Mode = PermissionMode.Ask
+                Mode = promptableMode
             },
             new PermissionRule
             {
                 Tools = ["sandbox"],
-                Mode = PermissionMode.Ask,
+                Mode = promptableMode,
                 Patterns = [ShellCommandSandboxArguments.SandboxEscalationSubject]
             },
             .. CreateShellCommandRules(PermissionMode.Allow, BuiltInSafeShellCommandPatterns),
+            .. CreateAutoApproveAllToolsRules(autoApproveAllTools),
             new PermissionRule
             {
                 Tools = ["doom_loop"],
@@ -191,6 +195,19 @@ .. CreateShellCommandRules(PermissionMode.Deny, BuiltInDeniedShellCommandPattern
         ];
     }
 
+    private static IEnumerable<PermissionRule> CreateAutoApproveAllToolsRules(bool autoApproveAllTools)
+    {
+        if (!autoApproveAllTools)
+        {
+            yield break;
+        }
+
+        yield return new PermissionRule
+        {
+            Mode = PermissionMode.Allow
+        };
+    }
+
     private static IEnumerable<PermissionRule> CreateShortcutPermissionRules(PermissionSettings configured)
     {
         ArgumentNullException.ThrowIfNull(configured);

docs/documentation.md

@@ -283,6 +283,7 @@ Overrides are session-scoped. For durable policy, edit configuration.
 {
   "Application": {
     "Permissions": {
+      "auto_approve_all_tools": false,
       "file_read": "Allow",
       "file_write": "Ask",
       "file_delete": "Ask",
@@ -317,6 +318,22 @@ Overrides are session-scoped. For durable policy, edit configuration.
 
 The `network` shortcut applies to built-in `webfetch` tools, including `web_run` and `headless_browser`. `headless_browser` renders pages through an installed Chromium-family browser such as Microsoft Edge, Google Chrome, or Chromium.
 
+### Auto-Approve All Tools
+
+For trusted workspaces, you can disable approval prompts for all tools:
+
+```json
+{
+  "Application": {
+    "Permissions": {
+      "auto_approve_all_tools": true
+    }
+  }
+}
+```
+
+This keeps workspace path checks, profile restrictions, sandbox-mode restrictions, and built-in deny rules active. Use explicit `rules` or shortcut settings when you need to override a specific deny policy.
+
 ## Workspace Files
 
 Run: