bot/docs/cli/approvals.md

summary, read_when, title

summary	read_when	title
CLI reference for `hanzo-bot approvals` (exec approvals for gateway or node hosts)	You want to edit exec approvals from the CLI You need to manage allowlists on gateway or node hosts	approvals

hanzo-bot approvals

Manage exec approvals for the local host, gateway host, or a node host. By default, commands target the local approvals file on disk. Use --gateway to target the gateway, or --node to target a specific node.

Related:

• Exec approvals: Exec approvals
• Nodes: Nodes

Common commands

hanzo-bot approvals get
hanzo-bot approvals get --node <id|name|ip>
hanzo-bot approvals get --gateway

Replace approvals from a file

hanzo-bot approvals set --file ./exec-approvals.json
hanzo-bot approvals set --node <id|name|ip> --file ./exec-approvals.json
hanzo-bot approvals set --gateway --file ./exec-approvals.json

Allowlist helpers

hanzo-bot approvals allowlist add "~/Projects/**/bin/rg"
hanzo-bot approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime"
hanzo-bot approvals allowlist add --agent "*" "/usr/bin/uname"

hanzo-bot approvals allowlist remove "~/Projects/**/bin/rg"

Notes

• --node uses the same resolver as hanzo-bot nodes (id, name, ip, or id prefix).
• --agent defaults to "*", which applies to all agents.
• The node host must advertise system.execApprovals.get/set (macOS app or headless node host).
• Approvals files are stored per host at ~/.hanzo/bot/exec-approvals.json.