Cron Jobs Security
Hey guys! Quick question about tools.exec.ask behavior with cron jobs.
I want to set tools.exec.ask: "always" so I get approval prompts for every exec command in my main session (trying to prevent my agent from running commands without asking first). But I'm worried this might break my automated cron jobs.
What the docs say:
The exec-approvals doc explains the ask modes:
"### Ask (exec.ask)
โข off: never prompt.
โข on-miss: prompt only when allowlist does not match.
โข always: prompt on every command."
And the cron-vs-heartbeat doc mentions:
"- Session isolation: Runs in cron:<jobId> without polluting main history."
What's missing:
The docs don't explicitly say whether isolated cron sessions inherit the tools.exec.ask policy or if they bypass it entirely.
My question:
If I set tools.exec.ask: "always", will my cron jobs (using --session isolated) still run exec commands automatically, or will they hang waiting for approval prompts?
If they are affected, is there a config pattern to enforce approvals in interactive sessions but let automated tasks run freely?
Thanks!
I want to set tools.exec.ask: "always" so I get approval prompts for every exec command in my main session (trying to prevent my agent from running commands without asking first). But I'm worried this might break my automated cron jobs.
What the docs say:
The exec-approvals doc explains the ask modes:
"### Ask (exec.ask)
โข off: never prompt.
โข on-miss: prompt only when allowlist does not match.
โข always: prompt on every command."
And the cron-vs-heartbeat doc mentions:
"- Session isolation: Runs in cron:<jobId> without polluting main history."
What's missing:
The docs don't explicitly say whether isolated cron sessions inherit the tools.exec.ask policy or if they bypass it entirely.
My question:
If I set tools.exec.ask: "always", will my cron jobs (using --session isolated) still run exec commands automatically, or will they hang waiting for approval prompts?
If they are affected, is there a config pattern to enforce approvals in interactive sessions but let automated tasks run freely?
Thanks!
The AI that actually does things. Emails, calendar, home automation - all from your favorite chat app. New shell, ready to help. The lobster way.
83,815Members
Resources
Similar Threads
Was this page helpful?
