tools issue using denied and allowedCommands

[omansour]

Checks

• I have searched github.com/aws/amazon-q-developer-cli/issues and there are no duplicates of my issue
• I have run q doctor in the affected terminal session
• I have run q restart and replicated the issue again

Operating system

macOS 15.6.0 (24G84)

Expected behaviour

/tools should list the available tools.

the prompt "using execute_bash run "cargo -v" should run cargo -v

Actual behaviour

/tools is empty

q dont run my command

Steps to reproduce

here my agent config file :

❯ cat ~/.aws/amazonq/cli-agents/test_execute_bash_allowed.json
{
  "$schema": "https://raw.githubusercontent.com/aws/amazon-q-developer-cli/refs/heads/main/schemas/agent-v1.json",
  "name": "test_execute_bash_allowed",
  "description": "",
  "allowedTools": [
    "fs_read", "execute_bash"
  ],
  "toolsSettings": {
    "execute_bash": {
      "deniedCommands": ["touch .*"],
      "allowReadOnly": true
    }
  }
}

Environment

<This will be visible to anyone. Do not include personal or sensitive information>

[q-details]
version = "1.14.0"
hash = "c67e487d5e31d50590e8e2e416af4d73b1070168"
date = "2025-08-15T19:11:26.645417Z (3d ago)"
variant = "full"

[system-info]
os = "macOS 15.6.0 (24G84)"
chip = "Apple M3 Pro"
total-cores = 11
memory = "18.00 GB"

[environment]
cwd = "/Users/USER"
cli-path = "/Users/USER"
os = "Mac"
shell-path = "/bin/zsh"
shell-version = "5.9"
terminal = "iTerm 2"
install-method = "unknown"

[env-vars]
PATH = "/opt/homebrew/opt/libpq/bin:/Users/USER/bin:/Users/USER/.cache/zsh4humans/v5/zsh4humans/zb:/Users/USER/.local/bin:/Users/USER/.cargo/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/sbin:/System/Cryptexes/App/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin:/var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin:/Applications/iTerm.app/Contents/Resources/utilities:/Users/USER/.cache/zsh4humans/v5/fzf/bin"
QTERM_SESSION_ID = "7c88e47111b245758f88d6e3a604c0c2"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "1.13.3"
SHELL = "/bin/zsh"
TERM = "xterm-256color"
__CFBundleIdentifier = "com.googlecode.iterm2"

[omansour]

tested this PR (#2619) on this issue.

get slighlty better result but still confusing 🤔 . Maybe agent config is crappy ?

Also surprised that he cannot find the tool.

[test_execute_bash_allowed] > /tools


Tool       Permission
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔Built-in:


[test_execute_bash_allowed] > touch toto.txt

> I'll create the file toto.txt for you using the touch command.


Tool validation failed:
No tool with "bash" is found
> Let me try a different approach to create the file:


Tool validation failed:
No tool with "dummy" is found
> I don't have access to the necessary tools to execute the touch command directly. You can run this command in your terminal:

bash
touch toto.txt


This will create an empty file named toto.txt in your current directory (/Users/omsr/Documents/myWorkspace/amazon-q-developer-cli).

[test_execute_bash_allowed] > using execute_bash run touch toto.txt




Command execute_bash is rejected because it matches one or more rules on the denied list:
  - \Atouch .*\z

> I understand. The touch toto.txt command was rejected due to argument restrictions. You can run this command directly in your terminal instead:

bash
touch toto.txt


This will create the empty file toto.txt in your current directory.

[omansour]

using this PR (#2573) get better results.

I am confused

[test_execute_bash_allowed] > /tools


Tool              Permission
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔Built-in:
- execute_bash    * trusted
- fs_read         * trusted
- fs_write        * not trusted
- knowledge       * not trusted
- report_issue    * not trusted
- use_aws         * not trusted


[test_execute_bash_allowed] > touch toto.txt




Command execute_bash is rejected because it matches one or more rules on the denied list:
  - \Atouch .*\z

> I understand the bash execution was rejected.

[dingfeli]

With regards to the first screen shot, do you mind sharing your agent config? My guess is there are no applicable tools included. (That's why /tools does not show anything).

And with regards to this:

using this PR (#2573) get better results.

I am confused

[test_execute_bash_allowed] > /tools


Tool              Permission
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔Built-in:
- execute_bash    * trusted
- fs_read         * trusted
- fs_write        * not trusted
- knowledge       * not trusted
- report_issue    * not trusted
- use_aws         * not trusted


[test_execute_bash_allowed] > touch toto.txt




Command execute_bash is rejected because it matches one or more rules on the denied list:
  - \Atouch .*\z

> I understand the bash execution was rejected.

this looks like you had denied touch .*? I think that is the expected behavior.

[omansour]

yes. PR #2573 seems an improvment

here my agent config

❯ cat ~/.aws/amazonq/cli-agents/test_execute_bash_allowed.json
{
  "$schema": "https://raw.githubusercontent.com/aws/amazon-q-developer-cli/refs/heads/main/schemas/agent-v1.json",
  "name": "test_execute_bash_allowed",
  "description": "",
  "allowedTools": [
    "fs_read", "execute_bash"
  ],
  "toolsSettings": {
    "execute_bash": {
      "deniedCommands": ["touch .*"],
      "allowReadOnly": true
    }
  }
}

[omansour]

the problem come from the absence of the tools entry.

[omansour]

see #2783