docs: add access control section to Developer tutorial #5615

dianed-square · 2025-11-06T19:22:29Z

Summary

This PR document access controls in the context of the default autonomous mode and Developer extension. Also lowercase "goose".

Documentation updates:

documentation/docs/getting-started/using-extensions.md:
- Add Access Control warning with link to access controls section
- Mention Todo and Extension Manager platform extensions
documentation/docs/guides/config-files.md:
- Changed GOOSE_MODE default from "smart_approve" to "auto" (per agent.rs)
documentation/docs/guides/goose-permissions.md:
- Clarify that Manual and Smart Approval modes support tool permissions (per permission_inspector.rs) and prompt for approval
documentation/docs/guides/subagents.mdx:
- Clarify subagents aren't available in manual, smart, or chat modes (per reply_parts.rs)
documentation/docs/mcp/developer-mcp.md:
- Add "Configuring Access Controls" section
documentation/docs/quickstart.md:
- Add "Next Steps" bullet with link to access controls section

Type of Change

Testing

Manual testing with goose codebase analysis

Related Issues

Relates to #5142

To see the specific tasks where the Asana app for GitHub is being used, see below:
- https://app.asana.com/0/0/1211843573790824

Copilot

Pull Request Overview

This PR updates documentation to improve consistency in product naming (changing "Goose" to "goose"), adds comprehensive access control documentation, and clarifies default behavior and permission modes throughout the documentation.

Standardizes product name capitalization from "Goose" to "goose" across all documentation
Adds detailed access control configuration section to Developer extension documentation
Updates default permission mode from "smart_approve" to "auto" in configuration documentation

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
documentation/docs/quickstart.md	Adds reference to new access controls documentation
documentation/docs/mcp/developer-mcp.md	Adds comprehensive access controls section, updates product name to lowercase, adds Tornado icon import
documentation/docs/guides/subagents.mdx	Clarifies that subagents are disabled in manual/smart approval modes, not just chat-only
documentation/docs/guides/goose-permissions.md	Updates product name to lowercase, adds tool permissions references, updates UI references to use Tornado icon
documentation/docs/guides/config-files.md	Corrects default GOOSE_MODE value from "smart_approve" to "auto"
documentation/docs/getting-started/using-extensions.md	Updates product name to lowercase, adds access control warning, reorganizes built-in extensions section

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

documentation/docs/getting-started/using-extensions.md

Copilot · 2025-11-06T19:24:04Z

documentation/docs/getting-started/using-extensions.md

 - [Auto Visualiser](/docs/mcp/autovisualiser-mcp): Automatically generates graphical data visualizations in conversations.

+:::warning Access Control
+goose operates autonomously by default. Combined with the Developer extension's tools, this means goose can execute commands and modify files without your approval. If you want more control over this behavior, you can configure the [goose permission mode](/docs/guides/goose-permissions), [tool permissions](/docs/guides/managing-tools/tool-permissions), and [.gooseignore files](/docs/guides/using-gooseignore). See [Configuruing Access Controls](/docs/mcp/developer-mcp##configuring-access-controls) for a brief overview.


Double hash symbols in the anchor link. The link should use a single '#' for the fragment identifier: /docs/mcp/developer-mcp#configuring-access-controls.

Suggested change

goose operates autonomously by default. Combined with the Developer extension's tools, this means goose can execute commands and modify files without your approval. If you want more control over this behavior, you can configure the [goose permission mode](/docs/guides/goose-permissions), [tool permissions](/docs/guides/managing-tools/tool-permissions), and [.gooseignore files](/docs/guides/using-gooseignore). See [Configuruing Access Controls](/docs/mcp/developer-mcp##configuring-access-controls) for a brief overview.

goose operates autonomously by default. Combined with the Developer extension's tools, this means goose can execute commands and modify files without your approval. If you want more control over this behavior, you can configure the [goose permission mode](/docs/guides/goose-permissions), [tool permissions](/docs/guides/managing-tools/tool-permissions), and [.gooseignore files](/docs/guides/using-gooseignore). See [Configuruing Access Controls](/docs/mcp/developer-mcp#configuring-access-controls) for a brief overview.

dianed-square · 2025-11-06T19:24:15Z

documentation/docs/mcp/developer-mcp.md

-```
+```
+
+## Configuring Access Controls


Alt: Move this content to new topic (in Security section?) except the Developer extension tools table

github-actions · 2025-11-06T19:25:32Z

PR Preview Action v1.6.0
Preview removed because the pull request was closed.
2025-11-06 19:45 UTC

Co-authored-by: Copilot <[email protected]>

documentation/docs/getting-started/using-extensions.md

Copilot

Pull Request Overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

documentation/docs/getting-started/using-extensions.md

documentation/docs/mcp/developer-mcp.md

Co-authored-by: Copilot <[email protected]>

Copilot

Pull Request Overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

documentation/docs/mcp/developer-mcp.md

* main: (60 commits) fix: add standard context menu items to prevent empty right-click menu (#5616) Bump openapi in prepare-release (#5611) docs: add access control section to Developer tutorial (#5615) Token state not showing on load, or after message is finished. (#5606) Change the other location too (#5608) feat(ui): bring back quick launcher (#5144) Support platform tools through CLI (#5570) Avoid web double write (#5601) fix: gemini flash -> pro for mcp smoke tests (#5574) Manual compaction test and fix (#5568) fix: tidy up claude cli handling (#5594) Remove jetbrains (#5602) feat(githubcopilot): add support for newer Copilot AI Models (#5603) fix: customised recipe to yaml string to avoid minininjia parsing error (#5494) Add pending extension indicator to extension panel (#5493) Add environment subsition for auth blocks (#5439) acp: ToolCallLocations and working cancellation (#5588) feat(providers): add Mistral AI provider (#5009) Listen for ctrl-c during provider request (#5585) Also accept null as description, not just missing (#5589) ...

* main: (31 commits) Standardize CLI argument flags and update documentation (#5516) Release 1.13.0 fix: move goosehints/AGENTS.md handling to goose, and out of developer extension (#5575) fix: add standard context menu items to prevent empty right-click menu (#5616) Bump openapi in prepare-release (#5611) docs: add access control section to Developer tutorial (#5615) Token state not showing on load, or after message is finished. (#5606) Change the other location too (#5608) feat(ui): bring back quick launcher (#5144) Support platform tools through CLI (#5570) Avoid web double write (#5601) fix: gemini flash -> pro for mcp smoke tests (#5574) Manual compaction test and fix (#5568) fix: tidy up claude cli handling (#5594) Remove jetbrains (#5602) feat(githubcopilot): add support for newer Copilot AI Models (#5603) fix: customised recipe to yaml string to avoid minininjia parsing error (#5494) Add pending extension indicator to extension panel (#5493) Add environment subsition for auth blocks (#5439) acp: ToolCallLocations and working cancellation (#5588) ...

…eanup * 'main' of github.com:block/goose: Standardize CLI argument flags and update documentation (#5516) Release 1.13.0 fix: move goosehints/AGENTS.md handling to goose, and out of developer extension (#5575) fix: add standard context menu items to prevent empty right-click menu (#5616) Bump openapi in prepare-release (#5611) docs: add access control section to Developer tutorial (#5615)

* main: (21 commits) differentiate debug/release in cache key (#5613) Unify subrecipe and subagent execution through shared recipe pipeline (#5082) Standardize CLI argument flags and update documentation (#5516) Release 1.13.0 fix: move goosehints/AGENTS.md handling to goose, and out of developer extension (#5575) fix: add standard context menu items to prevent empty right-click menu (#5616) Bump openapi in prepare-release (#5611) docs: add access control section to Developer tutorial (#5615) Token state not showing on load, or after message is finished. (#5606) Change the other location too (#5608) feat(ui): bring back quick launcher (#5144) Support platform tools through CLI (#5570) Avoid web double write (#5601) fix: gemini flash -> pro for mcp smoke tests (#5574) Manual compaction test and fix (#5568) fix: tidy up claude cli handling (#5594) Remove jetbrains (#5602) feat(githubcopilot): add support for newer Copilot AI Models (#5603) fix: customised recipe to yaml string to avoid minininjia parsing error (#5494) Add pending extension indicator to extension panel (#5493) ...

Co-authored-by: Copilot <[email protected]> Signed-off-by: fbalicchia <[email protected]>

* origin/main: (34 commits) Remove some logging (#5631) Use session IDs as task IDs for subagents instead of UUIDs (#5398) Fix the naming (#5628) fix: default tetrate model is broken, replace with haiku-4.5 (#5535) (#5587) Fetch less and use the right SHA (#5621) feat(ui): add custom macOS dock menu with New Window option (#5099) feat: remove hints from recipe prompts (#5622) docs: October 2025 Community All-Stars spotlight, Hacktoberfest edition (#5625) differentiate debug/release in cache key (#5613) Unify subrecipe and subagent execution through shared recipe pipeline (#5082) Standardize CLI argument flags and update documentation (#5516) Release 1.13.0 fix: move goosehints/AGENTS.md handling to goose, and out of developer extension (#5575) fix: add standard context menu items to prevent empty right-click menu (#5616) Bump openapi in prepare-release (#5611) docs: add access control section to Developer tutorial (#5615) Token state not showing on load, or after message is finished. (#5606) Change the other location too (#5608) feat(ui): bring back quick launcher (#5144) Support platform tools through CLI (#5570) ...

* main: (33 commits) Fix Claude Code provider to default to Auto mode (#5638) (#5642) Scheduler cleanup (#5571) Better search paths and handling of CLI providers (#5554) docs: description required for "Add Extension" in cli - phase 2 (#5635) Remove some logging (#5631) Use session IDs as task IDs for subagents instead of UUIDs (#5398) Fix the naming (#5628) fix: default tetrate model is broken, replace with haiku-4.5 (#5535) (#5587) Fetch less and use the right SHA (#5621) feat(ui): add custom macOS dock menu with New Window option (#5099) feat: remove hints from recipe prompts (#5622) docs: October 2025 Community All-Stars spotlight, Hacktoberfest edition (#5625) differentiate debug/release in cache key (#5613) Unify subrecipe and subagent execution through shared recipe pipeline (#5082) Standardize CLI argument flags and update documentation (#5516) Release 1.13.0 fix: move goosehints/AGENTS.md handling to goose, and out of developer extension (#5575) fix: add standard context menu items to prevent empty right-click menu (#5616) Bump openapi in prepare-release (#5611) docs: add access control section to Developer tutorial (#5615) ...

Co-authored-by: Copilot <[email protected]>

Co-authored-by: Copilot <[email protected]> Signed-off-by: Blair Allan <[email protected]>

add access control section to Developer tutorial

13c4b02

Copilot AI review requested due to automatic review settings November 6, 2025 19:22

dianed-square requested a review from a team as a code owner November 6, 2025 19:22

Copilot AI reviewed Nov 6, 2025

View reviewed changes

dianed-square commented Nov 6, 2025

View reviewed changes

Update documentation/docs/getting-started/using-extensions.md

7bc8cde

Co-authored-by: Copilot <[email protected]>

Copilot AI review requested due to automatic review settings November 6, 2025 19:26

dianed-square commented Nov 6, 2025

View reviewed changes

documentation/docs/getting-started/using-extensions.md Outdated Show resolved Hide resolved

Update documentation/docs/getting-started/using-extensions.md

ae2874c

Copilot AI reviewed Nov 6, 2025

View reviewed changes

documentation/docs/getting-started/using-extensions.md Show resolved Hide resolved

documentation/docs/mcp/developer-mcp.md Outdated Show resolved Hide resolved

Apply suggestion from @Copilot

e81841f

Co-authored-by: Copilot <[email protected]>

Copilot AI review requested due to automatic review settings November 6, 2025 19:34

Copilot AI reviewed Nov 6, 2025

View reviewed changes

documentation/docs/mcp/developer-mcp.md Show resolved Hide resolved

blackgirlbytes approved these changes Nov 6, 2025

View reviewed changes

dianed-square merged commit b063fce into main Nov 6, 2025
23 checks passed

github-actions bot mentioned this pull request Nov 6, 2025

chore(release): release version 1.13.1 (patch) #5619

Merged

fbalicchia pushed a commit to fbalicchia/goose that referenced this pull request Nov 7, 2025

docs: add access control section to Developer tutorial (block#5615)

4b98dd6

Co-authored-by: Copilot <[email protected]> Signed-off-by: fbalicchia <[email protected]>

github-actions bot mentioned this pull request Nov 11, 2025

chore(release): release version 1.14.0 (minor) #5676

Merged

Surendhar-N-D pushed a commit to Surendhar-N-D/goose that referenced this pull request Nov 17, 2025

docs: add access control section to Developer tutorial (block#5615)

1c3e292

Co-authored-by: Copilot <[email protected]>

arul-cc pushed a commit to arul-cc/goose that referenced this pull request Nov 17, 2025

docs: add access control section to Developer tutorial (block#5615)

a6c3db1

Co-authored-by: Copilot <[email protected]>

BlairAllan pushed a commit to BlairAllan/goose that referenced this pull request Nov 29, 2025

docs: add access control section to Developer tutorial (block#5615)

1a94210

Co-authored-by: Copilot <[email protected]> Signed-off-by: Blair Allan <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

docs: add access control section to Developer tutorial #5615

docs: add access control section to Developer tutorial #5615

Uh oh!

dianed-square commented Nov 6, 2025 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Copilot AI Nov 6, 2025

Uh oh!

dianed-square Nov 6, 2025

Uh oh!

github-actions bot commented Nov 6, 2025 •

edited

Loading

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

docs: add access control section to Developer tutorial #5615

docs: add access control section to Developer tutorial #5615

Uh oh!

Conversation

dianed-square commented Nov 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Documentation updates:

Type of Change

Testing

Related Issues

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Uh oh!

Copilot AI Nov 6, 2025

Choose a reason for hiding this comment

Uh oh!

dianed-square Nov 6, 2025

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Nov 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dianed-square commented Nov 6, 2025 •

edited

Loading

github-actions bot commented Nov 6, 2025 •

edited

Loading