Skip to content

Default the init full-permission consent to Yes, with a sharper warning - #11

Merged
gurnben merged 1 commit into
mainfrom
fix/init-default-full-permission
Oct 21, 2026
Merged

gurnben merged 1 commit into
mainfrom
fix/init-default-full-permission

Conversation

@gurnben

@gurnben gurnben commented Oct 21, 2026

Copy link
Copy Markdown
Member

Summary

The init wizard's full-permission consent defaulted to No — but No is the choice that breaks the product: the harness's skills cannot run unattended without full permission, so every run and flow fails closed on the first permission request. New users hit the wizard first and had no signal that No means "most workflows will not complete."

  • The confirm now highlights Yes as the recommended default (the bound value pre-sets the cursor, huh's idiom for v1.0.0), and the title marks it (recommended).
  • The description warns explicitly: "without full permission, runs and flows (audit → triage → patch → verify) fail closed on the first permission request — most workflows will not complete."
  • Doctor's scoped-mode message carries the same flows warning.
  • Headless init --yes still defaults to No — silent consent without a human reading the warning stays opt-in via --full-permission.

Verification

  • Full suite with race detector, vet, staticcheck clean (the huh v1.0.0 API takes defaults from the bound value, verified against the package source).
  • All tests pass, binary rebuilt.

💘 Generated with Crush

The consent question defaulted to No, but No is the choice that breaks
the product: the harness's skills cannot run unattended without full
permission, so every run and flow fails closed on the first permission
request. New users hit the wizard first and had no signal that No
means "most workflows will not complete."

The confirm now highlights Yes as the recommended default, and its
description warns explicitly that runs and flows (audit → triage →
patch → verify) will not complete without it. Doctor's scoped-mode
message carries the same warning. Headless `init --yes` still defaults
to No — silent consent without a human reading the warning is the one
path that stays opt-in via --full-permission.

💘 Generated with Crush

Assisted-by: Crush:rits/zai-org/glm-5-3
@gurnben
gurnben requested a review from a team as a code owner October 21, 2026 18:27
@gurnben
gurnben merged commit 4969666 into main Oct 21, 2026
2 checks passed
@gurnben
gurnben deleted the fix/init-default-full-permission branch October 21, 2026 18:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant