Files
LLeMbas-CLI/harness/permission/defaults.json
T
HomerandClaude Opus 5.5 880289970b Harness spec 3.2.0: teams — subagents that work together
team.md: a lead adds members (team_add) that work in the background on
the parts they own; members may lead areas of their own. The chat
setting agents {min, max} (defaults 1/4, an instance cap of 32) bounds
the whole tree, task helpers included; a team is offered only where
subagents are enabled and the model serves two requests at once
(capacity.parallel). A manager's work calls — risk write or execute,
bar job_stop and reading bash — answer a fixed refusal while the tool
list stays unchanged. The room: team_send to names or all, delivered
under "[Team message from X to Y:]" at the next step or waking a
finished member; a member's final reply is its report to its manager;
team_read shows the tree and the visible part of the room; team_stop
stops a subtree. Past the model's capacity a member waits for a slot,
the lead first. Size notes in context.note; texts in loop.json team;
prompts blocks/team_lead.md and team_member.md; tools allowed by
default. Conformance area team, written from a reference model.

The CLI embeds the new tool and prompt files; its tools are pending.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-09 08:17:48 +00:00

94 lines
2.5 KiB
JSON

{
"about": "The rules every session starts from, before the user's own. Keys are permission keys (a tool's access), values an action or a map of pattern → action; for a pattern the last matching rule wins, across patterns the strictest. Permission keys are tool names, except `plan`, which covers plan_write and plan_update together (the former `todo` key is read as `plan`).",
"rules": {
"*": "ask",
"read": {
"*": "allow",
"*.env": "ask",
"*.env.*": "ask",
"*.env.example": "allow"
},
"glob": "allow",
"grep": "allow",
"list": "allow",
"search": "allow",
"recall": "allow",
"show": "allow",
"python": "allow",
"ask_user": "allow",
"plan_submit": "allow",
"task": "allow",
"tasks": "allow",
"decisions": "allow",
"plan": "allow",
"job_list": "allow",
"job_output": "allow",
"job_stop": "allow",
"job_send": "allow",
"report": "allow",
"team_add": "allow",
"team_send": "allow",
"team_read": "allow",
"team_stop": "allow",
"web_search": "allow",
"memory": "allow",
"session_search": "allow",
"notes": "allow",
"knowledge": "allow",
"skills": "allow",
"skill_manage": "ask",
"settings": {
"*": "ask",
"list": "allow",
"get *": "allow"
},
"web_fetch": {
"*": "allow",
"private:*": "ask"
},
"external_directory": "ask",
"bash": {
"*": "ask",
"git status *": "allow",
"git diff *": "allow",
"git log *": "allow",
"git show *": "allow",
"git branch": "allow",
"git branch --list *": "allow",
"git branch -a": "allow",
"git branch -v": "allow",
"git branch -vv": "allow",
"git branch -av": "allow",
"git rev-parse *": "allow",
"git blame *": "allow",
"ls *": "allow",
"pwd": "allow",
"cat *": "allow",
"head *": "allow",
"tail *": "allow",
"wc *": "allow",
"which *": "allow",
"rg *": "allow",
"grep *": "allow",
"file *": "allow",
"tree *": "allow",
"git diff *--output*": "ask",
"git log *--output*": "ask",
"git show *--output*": "ask",
"git branch --list *-*": "ask",
"rg *--pre*": "ask",
"rg *--hostname-bin*": "ask",
"rg *--search-zip*": "ask",
"tree *-o*": "ask",
"tree *-R*": "ask",
"file *-C*": "ask"
},
"commit": "ask",
"branch": "ask",
"pr": "ask",
"merge": "ask",
"tag": "ask",
"release": "ask"
}
}