Who it is forA cautious engineer who wants to see and approve each file change an agent proposes before a pipeline is trusted on a real repo.
The problemAuto-approved permissions let agents edit real files without a pause, which is hard to trust on an unfamiliar codebase.
The outcomeA pipeline run where each permission request is reviewed by a person, with every decision recorded in the run log.
What you need first
- Bun 1.3 or newer (check with `bun --version`)
- Git
- A local repo the agents are allowed to edit, set through OPENFLOW_PROJECT
- Optional: a provider API key for paid models, or use the free `-free` models with no key
Steps
- Start OpenFlow with
FLOW_MANAGE_SERVER=1 bun openflow.tsand open http://localhost:5174. - Set the permissions toggle in the toolbar to
ask meinstead of the defaultauto. - Run the saved pipeline and approve or deny each permission request as it appears.
- Open the run log and check that every decision is recorded for the run.
Prompt for your agent
Using the OpenFlow repo at https://github.com/SeeRay11/OpenFlow, set the permissions toolbar to ask me, run a saved pipeline against <target-repo-path>, and list each permission request with its decision. Output a summary of the file changes approved. Verify that the run log contains one entry per decision.
Caveat. Permissions default to auto, which approves each request for that one call, so ask me mode must be selected on purpose before a run.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for SeeRay11/OpenFlow and "Review each agent permission before it edits files"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer