From 9269a1300bf4b47c5b854e8c963dfebeccd7d533 Mon Sep 17 00:00:00 2001
From: Daniel Imms <2193314+Tyriar@users.noreply.github.com>
Date: Sun, 28 Sep 2025 11:16:34 +0900
Subject: [PATCH] Add git branch auto-approve rules

- Allow git branch command by default
- Block destructive options: -d, -D, -m, -M, --delete, --force
- Prevent accidental branch deletion and renaming
---
 .../common/terminalChatAgentToolsConfiguration.ts          | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalChatAgentToolsConfiguration.ts b/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalChatAgentToolsConfiguration.ts
index e85cff70e1e..0708b5ef553 100644
--- a/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalChatAgentToolsConfiguration.ts
+++ b/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalChatAgentToolsConfiguration.ts
@@ -165,6 +165,13 @@ export const terminalChatAgentToolsConfiguration: IStringDictionary<IConfigurati
 			// - See notes on `grep`
 			'git grep': true,
 
+			// git branch
+			// - `-d`, `-D`, `--delete`: Prevent branch deletion
+			// - `-m`, `-M`: Prevent branch renaming
+			// - `--force`: Generally dangerous
+			'git branch': true,
+			'/^git branch\\b.*-(d|D|m|M|-delete|-force)\\b/': false,
+
 			// #endregion
 
 			// #region PowerShell