root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(FN-4599): expose policy tool metadata through core type surface

Browse Source 
Fusion-Task-Id: FN-4599
Fusion-Task-Lineage: 39bdbfd4-d90a-4232-a447-23ef107732e4
This commit is contained in:
Fusion
2026-05-15 07:09:59 -07:00
committed by gsxdsm
parent cdec48f795
commit 388ec0f7a1
2 changed files with 42 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
packages/core/src/agent-permission-policy.ts
View File

@@ -1,48 +1,19 @@
import type {
AgentPermissionPolicy,
AgentPermissionPolicyActionCategory,
AgentPermissionPolicyDisposition,
AgentPermissionPolicyPresetId,
AgentPermissionPolicyRules,
} from "./types.js";
import { AGENT_PERMISSION_POLICY_ACTION_CATEGORIES, AGENT_PERMISSION_POLICY_PRESET_IDS } from "./types.js";
import {
AGENT_PERMISSION_POLICY_ACTION_CATEGORIES,
AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES,
AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES,
AGENT_PERMISSION_POLICY_PRESET_IDS,
} from "./types.js";
export const DEFAULT_AGENT_PERMISSION_POLICY_PRESET_ID: AgentPermissionPolicyPresetId = "unrestricted";
export const AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES: Record<
AgentPermissionPolicyActionCategory,
readonly string[]
> = {
git_write: ["git commit", "git push", "git merge", "git branch -d", "git worktree add", "write", "edit"],
file_write_delete: ["write", "edit", "fn_task_attach"],
command_execution: ["bash (non-git)", "read", "find", "grep", "ls"],
network_api: ["fn_research_run (web/research)"],
task_agent_mutation: [
"fn_task_create",
"fn_delegate_task",
"fn_task_import_github",
"fn_task_import_github_issue",
"fn_spawn_agent",
"fn_update_agent_config",
"fn_update_identity",
],
};
export const AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES: readonly string[] = [
"fn_send_message",
"fn_post_room_message",
"fn_read_messages",
"fn_task_log",
"fn_task_done",
"fn_heartbeat_done",
"fn_task_document_write",
"fn_task_document_read",
"fn_memory_search",
"fn_memory_get",
"fn_memory_append",
"fn_read_evaluations",
"fn_reflect_on_performance",
];
export { AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES, AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES };
export interface BuiltInAgentPermissionPolicyPreset {
id: AgentPermissionPolicyPresetId;

35
packages/core/src/types.ts
View File

@@ -4606,6 +4606,41 @@ export const AGENT_PERMISSION_POLICY_ACTION_CATEGORIES: readonly PermanentAgentS
"task_agent_mutation",
] as const;
export const AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES: Record<
PermanentAgentSensitiveActionCategory,
readonly string[]
> = {
git_write: ["git commit", "git push", "git merge", "git branch -d", "git worktree add", "write", "edit"],
file_write_delete: ["write", "edit", "fn_task_attach"],
command_execution: ["bash (non-git)", "read", "find", "grep", "ls"],
network_api: ["fn_research_run (web/research)"],
task_agent_mutation: [
"fn_task_create",
"fn_delegate_task",
"fn_task_import_github",
"fn_task_import_github_issue",
"fn_spawn_agent",
"fn_update_agent_config",
"fn_update_identity",
],
};
export const AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES: readonly string[] = [
"fn_send_message",
"fn_post_room_message",
"fn_read_messages",
"fn_task_log",
"fn_task_done",
"fn_heartbeat_done",
"fn_task_document_write",
"fn_task_document_read",
"fn_memory_search",
"fn_memory_get",
"fn_memory_append",
"fn_read_evaluations",
"fn_reflect_on_performance",
];
export const AGENT_PROVISIONING_APPROVAL_MODES = ["always", "trusted-only", "never"] as const;
export type AgentProvisioningApprovalMode = (typeof AGENT_PROVISIONING_APPROVAL_MODES)[number];