zenflow

Overview ¶

Command zenflow runs multi-agent workflows from YAML definitions.

Permission handling for the zenflow CLI binary. The standalone `zenflow` CLI runs workflows whose tools (bash, write, ...) require user approval. This file wires an interactive permission handler that prompts on stdin, plus pre-approval / pre-deny flags for non-interactive use (CI, scripts). Behavior matrix:

flag combination | result
-------------------------+---------------------------------
--yolo | allow every tool, no prompt (YOLO mode)
--allow bash,read | allow listed without prompt;

| prompt others (or deny if non-TTY)

--deny bash,write | deny listed without prompt
--strict + --allow ... | deny anything not on --allow list
(no flags) + TTY | prompt for every tool call
(no flags) + non-TTY | deny with helpful error message

Interactive prompt:

Tool [bash] wants to run. Allow? [y/N/a (always)]

Responses:

y / Y allow once
n / N / empty deny + report tool error
a / A allow this tool name for the rest of the run