From a98d14c25213e74d372ec3a239e3d578a0e686b8 Mon Sep 17 00:00:00 2001
From: gsxdsm <gsxdsm@users.noreply.github.com>
Date: Wed, 3 Jun 2026 13:52:42 -0700
Subject: [PATCH] feat: per-node option to skip CLI first-run approval

A CLI node can set cliSkipApproval to bypass the trust-on-first-use pause and
run its command immediately. Exposed as a checkbox in the node inspector.
---
 packages/dashboard/app/components/WorkflowNodeEditor.tsx | 8 ++++++++
 packages/engine/src/executor.ts                          | 8 +++++---
 2 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/packages/dashboard/app/components/WorkflowNodeEditor.tsx b/packages/dashboard/app/components/WorkflowNodeEditor.tsx
index 08b6b5ebc1..2f8129f556 100644
--- a/packages/dashboard/app/components/WorkflowNodeEditor.tsx
+++ b/packages/dashboard/app/components/WorkflowNodeEditor.tsx
@@ -449,6 +449,14 @@ function InnerEditor({
                           <p className="wf-inspector-note wf-inspector-note--info">
                             Runs an arbitrary command in the task worktree. The first time this exact command runs, the task pauses for your approval. The node prompt is passed via FUSION_NODE_PROMPT.
                           </p>
+                          <label className="wf-field wf-field--checkbox">
+                            <input
+                              type="checkbox"
+                              checked={selectedNode.data.config?.cliSkipApproval === true}
+                              onChange={(e) => updateSelectedData({ config: { cliSkipApproval: e.target.checked } })}
+                            />
+                            <span>Skip first-run approval (runs without pausing)</span>
+                          </label>
                         </label>
                       ) : (
                         <label className="wf-field">
diff --git a/packages/engine/src/executor.ts b/packages/engine/src/executor.ts
index 079c4c1d23..ab528f001d 100644
--- a/packages/engine/src/executor.ts
+++ b/packages/engine/src/executor.ts
@@ -3479,9 +3479,11 @@ export class TaskExecutor {
     } else if (executorKind === "cli") {
       const rawCommand = typeof cfg.cliCommand === "string" && cfg.cliCommand.trim() ? cfg.cliCommand.trim() : undefined;
       if (rawCommand) {
-        // Arbitrary command: gated by trust-on-first-use approval. The exact
-        // command string must have been explicitly approved by the user.
-        if (!(await this.store.isWorkflowCliCommandApproved(rawCommand))) {
+        // Arbitrary command: gated by trust-on-first-use approval unless the
+        // node explicitly opts out (cliSkipApproval). The exact command string
+        // must otherwise have been approved by the user.
+        const skipApproval = cfg.cliSkipApproval === true;
+        if (!skipApproval && !(await this.store.isWorkflowCliCommandApproved(rawCommand))) {
           return this.pauseForCliApproval(node, live, rawCommand);
         }
         const env = prompt ? { ...process.env, FUSION_NODE_PROMPT: prompt } : undefined;