Files
LLeMbas-CLI/harness/permission/defaults.json
T
HomerandClaude Fable 5.1 2183040db8 Harness spec 2.0.0: background work is a job — commands and subagents alike, seen and steered
One registry per process, every job owned by a session: bash's background commands (and a command
still running at its timeout, which now goes to the background instead of being killed) and
subagents started with task background: true. job_list, job_output, job_stop (the former
bash_list, bash_output, bash_kill) and the new job_send and report; a finished job wakes the owning
session in every front end with its marked note. The TUI counts jobs, lists them (/jobs), opens a
command's output, enters a subagent and messages it, moves a command to the background (ctrl+b)
and asks before quitting with jobs running. The link gains the jobs capability. Subagents get a
session row of their own, the spec's preamble and agent texts, and their errors reach the report.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
2026-10-20 16:17:00 +00:00

80 lines
2.2 KiB
JSON

{
"about": "The rules every session starts from, before the user's own. Keys are permission keys (a tool's access), values an action or a map of pattern → action; for a pattern the last matching rule wins, across patterns the strictest. Permission keys are tool names, except `plan`, which covers plan_write and plan_update together (the former `todo` key is read as `plan`).",
"rules": {
"*": "ask",
"read": {
"*": "allow",
"*.env": "ask",
"*.env.*": "ask",
"*.env.example": "allow"
},
"glob": "allow",
"grep": "allow",
"list": "allow",
"ask_user": "allow",
"plan_submit": "allow",
"task": "allow",
"tasks": "allow",
"decisions": "allow",
"plan": "allow",
"job_list": "allow",
"job_output": "allow",
"job_stop": "allow",
"job_send": "allow",
"report": "allow",
"web_search": "allow",
"memory": "allow",
"session_search": "allow",
"notes": "allow",
"knowledge": "allow",
"skills": "allow",
"skill_manage": "ask",
"settings": {
"*": "ask",
"list": "allow",
"get *": "allow"
},
"web_fetch": {
"*": "allow",
"private:*": "ask"
},
"external_directory": "ask",
"bash": {
"*": "ask",
"git status *": "allow",
"git diff *": "allow",
"git log *": "allow",
"git show *": "allow",
"git branch": "allow",
"git branch --list *": "allow",
"git branch -a": "allow",
"git branch -v": "allow",
"git branch -vv": "allow",
"git branch -av": "allow",
"git rev-parse *": "allow",
"git blame *": "allow",
"ls *": "allow",
"pwd": "allow",
"cat *": "allow",
"head *": "allow",
"tail *": "allow",
"wc *": "allow",
"which *": "allow",
"rg *": "allow",
"grep *": "allow",
"file *": "allow",
"tree *": "allow",
"git diff *--output*": "ask",
"git log *--output*": "ask",
"git show *--output*": "ask",
"git branch --list *-*": "ask",
"rg *--pre*": "ask",
"rg *--hostname-bin*": "ask",
"rg *--search-zip*": "ask",
"tree *-o*": "ask",
"tree *-R*": "ask",
"file *-C*": "ask"
}
}
}