Permission policy for general agent (full access except task)
()
| 1034 | |
| 1035 | /// Permission policy for general agent (full access except task) |
| 1036 | fn general_permissions() -> PermissionPolicy { |
| 1037 | PermissionPolicy::new() |
| 1038 | .allow_all(&[ |
| 1039 | "read", |
| 1040 | "write", |
| 1041 | "edit", |
| 1042 | "grep", |
| 1043 | "glob", |
| 1044 | "ls", |
| 1045 | "bash", |
| 1046 | "web_fetch", |
| 1047 | "web_search", |
| 1048 | "git", |
| 1049 | "patch", |
| 1050 | "batch", |
| 1051 | "generate_object", |
| 1052 | ]) |
| 1053 | .deny("task") |
| 1054 | .deny("parallel_task") |
| 1055 | } |
| 1056 | |
| 1057 | /// Permission policy for plan agent (read-only) |
| 1058 | fn plan_permissions() -> PermissionPolicy { |
no test coverage detected