Permission denied and could not request permission from user

[doggy8088]

Describe the bug

I'm on Windows. Using PowerShell 7.5.3.

I run this command:

copilot --allow-all-tools -p (Get-Content '$PSScriptRoot\Prompt.txt' -Raw)"

When LLM write a PowerShell script and run it, such as:

$html = Get-Content anthropic_article.html -Raw; $html -replace '<[^>]+>','' -replace '\s+', '' | Select-String -Pattern 'Effective context engineering.*?(?=Share this article)' | ForEach-Object { $_.Matches.Value } | Out-String | Select-Object -First 3000

It will fail like this screenshot:

I already provided --allow-all-tools flag. It should work, right?

Affected version

0.0.332 Commit: ace227c

Steps to reproduce the behavior

echo 123 > a.txt

copilot --allow-all-tools -p @'
Run the following PowerShell command and summary $html's content.

$html = Get-Content a.txt -Raw; $html -replace '<[^>]+>','' -replace '\s+', '' | Select-String -Pattern 'Effective context engineering.*?(?=Share this article)' | ForEach-Object { $_.Matches.Value } | Out-String | Select-Object -First 3000
'@

Expected behavior

I expect any powershell script should be able to run.

Additional context

• There is no meaningful logs for my issue.
• Operating system: Windows 10
• CPU architecture: x86_64
• Terminal emulator: Windows Terminal
• Shell: pwsh (PowerShell 7.5.3)

[doggy8088]

There is also another similar issue about read_powershell tool.

✗ read_powershell
   Invalid session ID: main. Please supply a valid session ID to read output from.

[SteveSandersonMS]

I already provided --allow-all-tools flag. It should work, right?

Thanks for providing a clear repro. In this case the issue is that \s gets detected as a path, and it's rejecting because you haven't pre-approved access to that directory (on Windows, \s resolves as a directory called "s" at the root of your current drive - try dir \s in PowerShell to see it try).

Detecting that this is actually a regex is quite tricky, but we'll have to find a solution.

Invalid session ID

Do you have a repro for that? It sounds like a completely different issue so if you're able to file a different issue that would be very helpful. Thanks!

[doggy8088]

I can't reproduce this Invalid session ID issue every time. I have a complex prompt to do various tasks.

Can you tell what's the read_powershell tool do?

[SteveSandersonMS]

Can you tell what's the read_powershell tool do?

It allows the agent to read back the output from any shell calls it's running in the background. The session ID refers to the fact that there can be multiple background terminal sessions.

If you do find a repro please let us know!

[doggy8088]

Is it possible let GitHub Copilot CLI avoid load $PROFILE into session by adding "-nop" argument?

Or, can we choose cmd or pwsh in config or in prompt?

[SteveSandersonMS]

Is it possible let GitHub Copilot CLI avoid load $PROFILE into session by adding "-nop" argument?

The latest version now does always pass -nop to pwsh.exe.

[examon]

This has been fixed in v0.0.400. Regex arguments to PowerShell's -replace, -match, and -split operators are no longer misidentified as filesystem paths, so they no longer trigger spurious permission prompts. If you're still seeing this behavior on the latest version, please feel free to reopen this issue.