Dev open-sources Intenter, approving Claude Code commands by intent instead of string

No_Discipline_7674 · reddit · 2026-09-05

Tired of Claude Code's relentless Bash permission prompts — his settings. grew past 1,000 lines of allowlists while Claude kept producing new command variants — a developer open-sourced Intenter. Instead of matching command strings, it resolves a command's behavior (e.g. npm run cleanup → rm -rf ./dist → WORKSPACEGENERATED); approve a behavior once and identical behavior is auto-allowed across sessions, but if package. is tampered with and the same command maps to rm -rf /Documents, the mismatched fingerprint triggers a block. Architecture: Claude Code → hook → local daemon → deterministic ALLOW/ASK/BLOCK, no LLM in the security decision, fully local with no telemetry. Supports Git, npm/pnpm/yarn, Gradle, Maven, curl and common shell commands on macOS/Linux/Windows. The author notes Claude's new "Auto mode" nearly obsoleted the idea.

Original post →

More from coding & agent

coding & agent channel →