From d9e7e42d0b692b91168b4d69cb5a87e6460f3100 Mon Sep 17 00:00:00 2001
From: Teknium <127238744+teknium1@users.noreply.github.com>
Date: Tue, 7 Apr 2026 01:00:02 -0700
Subject: [PATCH] fix(approval): load permanent command allowlist on startup
 (#5076)

Co-authored-by: Timo Karp <timo@timos-macbook-pro.taildbbd26.ts.net>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 tools/approval.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/tools/approval.py b/tools/approval.py
index 19399836..b49e444a 100644
--- a/tools/approval.py
+++ b/tools/approval.py
@@ -871,3 +871,7 @@ def check_all_command_guards(command: str, env_type: str,
 
     return {"approved": True, "message": None,
             "user_approved": True, "description": combined_desc}
+
+
+# Load permanent allowlist from config on module import
+load_permanent_allowlist()