gh login.
Langy asks which way to use the first time a request needs a code change. Requests that the platform can do on its own, such as creating a scenario or an evaluation, never ask.
Also check: Pull requests (the GitHub path), The sandbox (where Langy itself runs), CLI (the
langwatch command).How does sharing a folder work
1
Ask for a change
Ask Langy for something in your code: “instrument my traces”, “fix the agent behind this failing scenario”, “add a plan parameter to my connected agent”. Langy explains what it will change and shows the code access card with two options.
2
Run the command in the folder
Pick Share local folder. The card shows one command. Run it in the folder you want Langy to work in:This signs you in if you are not signed in yet, then shows the request from your conversation. Press Enter to approve it. The request expires after 15 minutes.The command acts as you, so the only credential it uses is your
langwatch login on this machine. A LANGWATCH_API_KEY in the folder’s .env or in your shell is never used here and is left as it is. When the login is missing or no longer valid, the command runs the browser sign-in first and then continues.3
Langy works in the folder
Once approved, the card shows the connected folder and the branch, and Langy starts. It explores the project, creates a branch from the latest default branch, makes the change, runs the project’s own checks, commits in your git identity, pushes, and opens the pull request when
gh is signed in. When gh is not signed in, Langy reports the branch name instead.4
Disconnect
Press Ctrl-C in the terminal to disconnect. The chat shows the folder as disconnected, and the next request that needs code access asks again.
What can Langy do in the folder
Every action runs on your machine, inside the shared folder, through the CLI. Langy cannot see or touch anything outside it.
Edits and git run without a question because Langy works on its own branch: it commits in your git identity on a
langy/* branch, your working state and your default branch stay untouched, and the pull request is where you review the change. Which git form asks is decided by reading the command itself, not by what Langy says about it.
When the CLI refuses an action, it tells Langy why, so Langy finds another way inside the folder or says what it could not do.
Permissions
When a command needs approval, you can answer in the terminal or in the chat. The terminal shows a selector under the transcript, and the chat shows a permission card with the command, the folder and the machine name. Both offer the same three answers:- Allow this pattern this session runs this command and, until you disconnect, every command that starts the same way, for example
pnpm *. This is the first option in the terminal, so Enter takes it. - Allow once runs this command.
- Deny refuses it. Langy does not run it again in that turn. In the terminal you can add one line saying what to do instead.
Answered in the terminal: allowed "uv" for this session. Answer on the card and the terminal closes its selector and prints the answer.
When the CLI runs without a terminal, for example in a pipe or in CI, it shows no selector and the card is the only way to answer.
The card expires after 10 minutes without an answer. Langy then ends its turn and says what it still needs.
Skip permission checks
The permission card has a switch, Skip all permission checks this session (I accept the risk), that turns approvals off for the rest of the connection. The switch is on the card only, not in the terminal selector. Refusals for paths outside the folder and forsudo still apply.
The switch is enabled only for models your provider settings allow. Open the provider in Settings > Model providers, section Advanced, field Models allowed to skip Langy permission checks, and enter one pattern per line. Each pattern is a regular expression matched against the model name without the provider prefix. When the conversation’s model matches none of them, the switch is disabled and says so.
The defaults:
- OpenAI:
^gpt-5\.6-(terra|sol)$,^gpt-5\.([7-9]|\d{2,})(?!.*-(luna|mini|nano))and^gpt-([6-9]|\d{2,})(?!.*-(luna|mini|nano)) - Anthropic:
^claude-(opus|fable)-([5-9]|\d{2,}) - Every other provider: none, so the switch stays disabled until you add patterns
Remember the GitHub choice
The code access card has a Remember this choice option for GitHub. With it on, later requests skip the card and show a status line, Using GitHub (remembered), with a Change link that clears the choice and asks again. The same choice is visible in Settings > Integrations, next to the GitHub connection. The local folder choice is never remembered, because the connection belongs to one conversation and is one command away.What does the CLI do on your machine
- The connection is outbound only, from your machine to LangWatch. The CLI opens no listening port and accepts no inbound connection.
- The CLI receives a key scoped to the one conversation. Ctrl-C ends it. You can also disconnect from the chat.
- A command stops after 5 minutes unless Langy asks for a longer limit, up to 15 minutes.
- Command output returns to Langy when the command ends, capped at 64 KiB. Longer output is kept in a log file under
.langwatch/langy-logs/in the folder, and Langy gets the path. - Processes Langy starts in the background, such as a development server, keep running after the CLI exits. Langy reports the process id and the log path.
- You do not install the CLI globally:
npx langwatch@latestruns it through npm.