Files
LLeMbas-CLI/harness/permission/defaults.json
T
HomerandClaude Fable 5.1 837f38c744 Harness spec 1.1.0: one plan, prototypes and the library shared; the CLI implements it
The spec: plan_write and plan_update (new, shared, offered in every mode) and
plan_submit (now shared) keep one structured plan — findings, objectives,
phases of tasks — in place of the todo list, which lives on as a former name
of plan_write. The shared system text is one text for both projects, with
variables for what differs; the mode texts, a prototypes block and a library
block are shared. acp.md: the client hands the device what only it knows
(context, library, prototypes), the plan travels as a structure (plan_state),
library calls carry the chat's scope, and a client may rewind a session.
loop.json says its numbers as numbers. Four conformance areas: plan,
prototype, library_scope, toolcall_index.

The CLI: the plan is kept per session in the store and drawn above the prompt
and on the approval card; the prompt is assembled from the spec's texts with
their variables filled; the link reads the instance's instructions,
personalization, knowledge scope and prototype offer, sends the plan as a
structure and answers rewind; library calls to the instance carry the session
as scope; a prototype written in the terminal is saved as a file and named in
the transcript; a tool-call fragment without an index continues the last call;
the default theme is Moria; dead exports and Hermes leftovers removed.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-10-18 04:02:12 +02:00

77 lines
2.1 KiB
JSON

{
"about": "The rules every session starts from, before the user's own. Keys are permission keys (a tool's access), values an action or a map of pattern → action; for a pattern the last matching rule wins, across patterns the strictest. Permission keys are tool names, except `plan`, which covers plan_write and plan_update together (the former `todo` key is read as `plan`).",
"rules": {
"*": "ask",
"read": {
"*": "allow",
"*.env": "ask",
"*.env.*": "ask",
"*.env.example": "allow"
},
"glob": "allow",
"grep": "allow",
"list": "allow",
"ask_user": "allow",
"plan_submit": "allow",
"task": "allow",
"tasks": "allow",
"decisions": "allow",
"plan": "allow",
"bash_output": "allow",
"bash_kill": "allow",
"web_search": "allow",
"memory": "allow",
"session_search": "allow",
"notes": "allow",
"knowledge": "allow",
"skills": "allow",
"skill_manage": "ask",
"settings": {
"*": "ask",
"list": "allow",
"get *": "allow"
},
"web_fetch": {
"*": "allow",
"private:*": "ask"
},
"external_directory": "ask",
"bash": {
"*": "ask",
"git status *": "allow",
"git diff *": "allow",
"git log *": "allow",
"git show *": "allow",
"git branch": "allow",
"git branch --list *": "allow",
"git branch -a": "allow",
"git branch -v": "allow",
"git branch -vv": "allow",
"git branch -av": "allow",
"git rev-parse *": "allow",
"git blame *": "allow",
"ls *": "allow",
"pwd": "allow",
"cat *": "allow",
"head *": "allow",
"tail *": "allow",
"wc *": "allow",
"which *": "allow",
"rg *": "allow",
"grep *": "allow",
"file *": "allow",
"tree *": "allow",
"git diff *--output*": "ask",
"git log *--output*": "ask",
"git show *--output*": "ask",
"git branch --list *-*": "ask",
"rg *--pre*": "ask",
"rg *--hostname-bin*": "ask",
"rg *--search-zip*": "ask",
"tree *-o*": "ask",
"tree *-R*": "ask",
"file *-C*": "ask"
}
}
}