Approve commands from your phone

How it works

Approvals are off until you ask for them. Turn them on from the terminal:

> /fleet-approvals on
✓ risky commands now ask your phone

After that, a gated tool call (Bash by default) pauses on the machine and sends an Approve / Deny prompt to your phone and watch — with the project and the exact command. Tap Approve and it runs; tap Deny and the agent is told no, so it can try another route. You can also choose allow for this session to stop being asked about that command again.

The guard on irreversible commands

"Allow for the session" is convenient — and dangerous if it covers something destructive. So a danger guard runs locally on your machine and inspects the real, untruncated command before anything executes. Anything that can't be undone is excluded from blanket approvals and always re-asks:

• ·
  Git history destruction — push --force, reflog expire, branch -D, reset --hard
• ·
  Filesystem data loss — rm -rf, shred, find … -delete, disk writes
• ·
  Databases — DROP, TRUNCATE, DELETE without a WHERE, FLUSHALL
• ·
  Infrastructure teardown — terraform destroy, kubectl delete, cloud … delete

Because the guard runs on your machine and sees the full command, it holds even if the network or the app were compromised — the worst case is being asked one extra time. It's open source, so you can read exactly what it flags.

Private by design

An approval prompt carries only what you need to decide — the project folder's name and the command being gated. No source code, file contents, or prompts ever leave your machine. See the privacy policy for the full list.

FAQ