root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(FN-4792): complete Step 1 — add secret policy type vocabulary

Browse Source 
Fusion-Task-Id: FN-4792
Fusion-Task-Lineage: 8e29f9a0-4c9f-4322-9595-3c9c581dacb0
This commit is contained in:
Fusion (runfusion.ai)
2026-05-16 23:55:56 -07:00
committed by gsxdsm
parent 25bc5d3a18
commit aa2f588048
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
packages/core/src/types.ts
View File

@@ -2807,6 +2807,11 @@ export interface ProjectSettings {
* to permanent executor agents using the reporting chain heuristic.
* Tasks without an eligible permanent executor remain queued. */
ephemeralAgentsEnabled?: boolean;
/** Default access policy applied to a secret when its row-level `access_policy`
* is null/unset. One of "auto" (return value to caller and audit),
* "prompt" (route through approvals), or "deny" (reject without prompt).
* Default when unset: "prompt". */
secretsAccessPolicy?: SecretAccessPolicy;
/** Approval policy for agent provisioning tools (fn_agent_create/fn_agent_delete). */
agentProvisioning?: {
approvalMode?: AgentProvisioningApprovalMode;
@@ -4905,6 +4910,9 @@ export const AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES: readonly string[] = [
export const AGENT_PROVISIONING_APPROVAL_MODES = ["always", "trusted-only", "never"] as const;
export type AgentProvisioningApprovalMode = (typeof AGENT_PROVISIONING_APPROVAL_MODES)[number];
export const SECRET_ACCESS_POLICIES = ["auto", "prompt", "deny"] as const;
export type SecretAccessPolicy = (typeof SECRET_ACCESS_POLICIES)[number];
export const SANDBOX_PROVISIONING_APPROVAL_MODES = ["always", "trusted-only", "never"] as const;
export type SandboxProvisioningApprovalMode = (typeof SANDBOX_PROVISIONING_APPROVAL_MODES)[number];