--trust-all-tools no longer works with the default agent in non-interactive mode

[mattyn]

Checks

• I have searched github.com/aws/amazon-q-developer-cli/issues and there are no duplicates of my issue
• I have run q doctor in the affected terminal session
• I have run q restart and replicated the issue again

Operating system

Linux 6.12.79-101.147.amzn2023.aarch64 - Amazon Linux 2023.11.20260413

Expected behaviour

When using --trust-all-tools with --non-interactive I expect all tools to work without an interactive prompt. I have audited the tools I use and accept the risk of this configuration. It used to work this way.

Actual behaviour

$ kiro-cli chat --trust-all-tools --no-interactive <my prompt>
All tools are now trusted (!). Kiro will execute tools without asking for confirmation.
Agents can sometimes do unexpected things so understand the risks.

Learn more at https://kiro.dev/docs/cli/chat/security/#using-tools-trust-all-safely



> 
[tries to run a bash command]

Command execute_bash is rejected because it matches one or more rules on the denied list:
  - non-interactive mode (no user to approve)

What is this denied list and how can I influence it? The error message is confusing and the change broke my workflow.

Steps to reproduce

Yes, see above.

Environment

<This will be visible to anyone. Do not include personal or sensitive information>

[q-details]
version = "2.0.0"
hash = "0026b0505ef7bc2b10780c7bdb57813e5d949747"
date = "2026-04-13T09:05:23.535276Z (1d ago)"
variant = "minimal"

[system-info]
chip = "Neoverse-V1"
total-cores = 8
memory = "15.31 GB"

[system-info.os.linux]
kernel_version = "6.12.79-101.147.amzn2023.aarch64"
id = "amzn"
name = "Amazon Linux"
pretty_name = "Amazon Linux 2023.11.20260413"
version_id = "2023"
version = "2023"
variant = "internal"

[environment]
cwd = "/local/home/USER/ddbc-rest"
cli-path = "/local/home/USER/ddbc-rest"
os = "Linux"
shell-path = "/local/home/USER/.toolbox/tools/toolbox/1.1.4161.0/toolbox-exec"
shell-version = "5.2.15"
install-method = "toolbox"
in-ssh = true

[env-vars]
PATH = "/home/USER/.local/share/mise/installs/node/24.14.0/bin:/home/USER/.local/share/mise/installs/python/3.12.13/bin:/home/USER/.local/share/mise/installs/python/3.11.15/bin:/home/USER/.local/share/mise/installs/python/3.10.20/bin:/home/USER/.local/share/mise/installs/python/3.9.25/bin:/home/USER/.local/share/mise/installs/python/3.8.20/bin:/home/USER/.toolbox/bin:/home/USER/.toolbox/bin:/home/USER/.cargo/bin:/home/USER/.local/bin:/home/USER/bin:/usr/local/bin:/usr/bin:/usr/local/sbin:/usr/sbin"
SHELL = "/bin/bash"
TERM = "screen"
XDG_SESSION_TYPE = "tty"