feat(FN-3953): wire agent provisioning approval policy into engine tools

Merged agent provisioning approval policies into the engine with guard controls that restrict which agents can be created and by whom, integrated through the CLI extension and core policy definitions. Fusion-Task-Id: FN-3953
2026-05-10 15:27:36 -07:00
parent 6769b836f6
commit 8e958e6879
10 changed files with 347 additions and 19 deletions
--- a/packages/core/src/settings-schema.ts
+++ b/packages/core/src/settings-schema.ts
@@ -212,6 +212,7 @@ export const DEFAULT_PROJECT_SETTINGS = {
  verificationFixRetries: 3,
  buildTimeoutMs: 300_000,
  requirePlanApproval: false,
+  agentProvisioning: {},
  specStalenessEnabled: false,
  specStalenessMaxAgeMs: 6 * 60 * 60 * 1000,
  taskStuckTimeoutMs: 600_000,