Working in a project

Commands

What the model may run, in which shell, and what an allowance covers.

In Code the model runs commands in the project folder: git, gh, package managers, tests, builds. It asks in every mode except Auto, with the full command shown first.

Which shell

The model can pick pwsh, powershell, cmd, bash or sh. Left alone: PowerShell 7 on Windows, your own login shell elsewhere. On Windows, bash comes from Git for Windows, never WSL's.

Nothing can be typed into it

There is no terminal behind a command, so nothing can answer a prompt. Prompts and pagers are turned off (GIT_TERMINAL_PROMPT=0, PAGER=cat, NO_COLOR=1). Run editors, git rebase -i and REPLs yourself.

Limits

  • Two minutes by default, ten if the model asks for it
  • Output over 30,000 characters is cut in the middle, keeping both ends
  • Stopping the reply stops the command and everything it started

Always allow is narrow

It remembers how a command starts, not the whole line. Allowing npm test --watch allows npm test; it does not allow npm publish. Anything that could run anything, such as python or bash, is remembered whole. Each command in a chain counts separately.

A command is not undoable. Draggy cannot see what it did, so a git checkout . is as final as it would be in your terminal.