feat(permission): tiered tool-permission system with approval gate#95

Open

hakula139 wants to merge 16 commits into

mainfrom

feat/permissions

Commits on Jun 26, 2026

docs(design): tiered tool permission and approval design
hakula139
committed
feat(permission): add rule grammar, mode, and decision gate
hakula139
committed
feat(config): layer permission policy with project-tighten-only trust
hakula139
committed
feat(permission): extract gate targets from tool inputs
hakula139
committed
feat(permission): gate tool calls with an approval round-trip
hakula139
committed
fix(permission): match operator-bearing deny rules against the whole command
hakula139
committed
fix(permission): resolve symlinked parents for brand-new write targets
hakula139
committed
fix(permission): reject permission rules with an unbalanced parenthesis
hakula139
committed
fix(permission): treat output redirection as compound for allow rules
hakula139
committed
fix(permission): never treat a path as inside a non-absolute cwd
hakula139
committed
fix(tui): give a dropped approval decision an actionable error
hakula139
committed
refactor(permission): replace the deny bool with a MatchDiscipline enum
hakula139
committed
docs(permission): align the design doc and comments with shipped Phase 1
hakula139
committed
test(permission): cover tool gate methods and the clear-to-deny path
hakula139
committed
fix(agent): deny when an approval request cannot be delivered
hakula139
committed
fix(tool): gate read-only tools on a path target so denies apply
hakula139
committed