Approving commands is impossible when the agent keeps combining them
I would totally like to give the agent in the IDE access to run e.g. "git *" but it almost always combined operations into a single command like "cd dirx && git blah" and then the IDE asks me if I'd like to approve that exact string, or "cd *", etc.
No, I DON'T want to give it access to "cd *" since the agent could go hayway and run "cd dirx && rm *"
I feel like this could be fixed it the "approved commands" list allowed regex instead of just wildcards.
Anyone have any creative solutions?