Working in a project
Commands
What the model may run, in which shell, and what an allowance covers.
In Code the model runs commands in the project folder: git, gh, package managers, tests, builds. It asks in every mode except Auto, with the full command shown first.
Which shell
The model can pick pwsh, powershell,
cmd, bash or sh. Left alone: PowerShell 7
on Windows, your own login shell elsewhere. On Windows, bash comes
from Git for Windows, never WSL's.
Nothing can be typed into it
There is no terminal behind a command, so nothing can answer a prompt. Prompts
and pagers are turned off (GIT_TERMINAL_PROMPT=0,
PAGER=cat, NO_COLOR=1). Run editors,
git rebase -i and REPLs yourself.
Limits
- Two minutes by default, ten if the model asks for it
- Output over 30,000 characters is cut in the middle, keeping both ends
- Stopping the reply stops the command and everything it started
Always allow is narrow
It remembers how a command starts, not the whole line. Allowing
npm test --watch allows npm test; it does not allow
npm publish. Anything that could run anything, such as
python or bash, is remembered whole. Each command in a
chain counts separately.
A command is not undoable. Draggy cannot see what it did, so a
git checkout . is as final as it would be in your terminal.