lev-os Authorize
Manage the persistent allowlist at ~/.claude/authorized-paths.txt that bypasses pre_tool_use.py security checks.
Commands
| Command | Action |
|---|---|
/authorize add <pattern> |
Add path pattern to allowlist |
/authorize remove <pattern> |
Remove pattern from allowlist |
/authorize list |
Show current allowlist |
/authorize clear |
Clear all authorized paths |
Usage
# Allow a specific file
/authorize add ~/.secrets/api-keys.json
# Allow a directory pattern
/authorize add ~/.config/myapp/*
# Allow by extension
/authorize add *.local
# Remove authorization
/authorize remove ~/.secrets/api-keys.json
# View all authorized paths
/authorize list
Implementation
When user invokes /authorize:
add
echo "<pattern>" >> ~/.claude/authorized-paths.txt
sort -u ~/.claude/authorized-paths.txt -o ~/.claude/authorized-paths.txt
Confirm: "✓ Added <pattern> to authorized paths"
remove
grep -v "^<pattern>$" ~/.claude/authorized-paths.txt > /tmp/auth.tmp
mv /tmp/auth.tmp ~/.claude/authorized-paths.txt
Confirm: "✓ Removed <pattern> from authorized paths"
list
cat ~/.claude/authorized-paths.txt 2>/dev/null || echo "(empty)"
Display as formatted list.
clear
rm -f ~/.claude/authorized-paths.txt
Confirm: "✓ Cleared all authorized paths"
Pattern Matching
The hook uses these matching rules:
- Exact match:
/path/to/file.txt - Glob patterns:
*.local,~/.config/* - Directory prefix:
/path/to/dir/(trailing slash = all children)
Security Notes
- Authorizations persist across sessions
- Review periodically with
/authorize list - Use narrow patterns (specific files > broad globs)
.envfiles have built-in allowlist in hook (.env.local,.env.sample,.env.example)