I hate gemini cli policy setup

This commit is contained in:
2026-02-28 08:32:14 -05:00
parent db118f0a5c
commit f2512c30e9
2 changed files with 272 additions and 22 deletions

View File

@@ -0,0 +1,272 @@
# Maximum priority autonomy for agents and discovered tools
# This ensures sub-agents can execute any tool without confirmation.
[[rule]]
toolName = "discovered_tool_fetch_url"
decision = "allow"
priority = 100
description = "Allow discovered fetch_url tool."
[[rule]]
toolName = "discovered_tool_get_file_slice"
decision = "allow"
priority = 100
description = "Allow discovered get_file_slice tool."
[[rule]]
toolName = "discovered_tool_get_file_summary"
decision = "allow"
priority = 100
description = "Allow discovered get_file_summary tool."
[[rule]]
toolName = "discovered_tool_get_git_diff"
decision = "allow"
priority = 100
description = "Allow discovered get_git_diff tool."
[[rule]]
toolName = "discovered_tool_get_tree"
decision = "allow"
priority = 100
description = "Allow discovered get_tree tool."
[[rule]]
toolName = "discovered_tool_get_ui_performance"
decision = "allow"
priority = 100
description = "Allow discovered get_ui_performance tool."
[[rule]]
toolName = "discovered_tool_list_directory"
decision = "allow"
priority = 100
description = "Allow discovered list_directory tool."
[[rule]]
toolName = "discovered_tool_py_check_syntax"
decision = "allow"
priority = 100
description = "Allow discovered py_check_syntax tool."
[[rule]]
toolName = "discovered_tool_py_find_usages"
decision = "allow"
priority = 100
description = "Allow discovered py_find_usages tool."
[[rule]]
toolName = "discovered_tool_py_get_class_summary"
decision = "allow"
priority = 100
description = "Allow discovered py_get_class_summary tool."
[[rule]]
toolName = "discovered_tool_py_get_code_outline"
decision = "allow"
priority = 100
description = "Allow discovered py_get_code_outline tool."
[[rule]]
toolName = "discovered_tool_py_get_definition"
decision = "allow"
priority = 100
description = "Allow discovered py_get_definition tool."
[[rule]]
toolName = "discovered_tool_py_get_docstring"
decision = "allow"
priority = 100
description = "Allow discovered py_get_docstring tool."
[[rule]]
toolName = "discovered_tool_py_get_hierarchy"
decision = "allow"
priority = 100
description = "Allow discovered py_get_hierarchy tool."
[[rule]]
toolName = "discovered_tool_py_get_imports"
decision = "allow"
priority = 100
description = "Allow discovered py_get_imports tool."
[[rule]]
toolName = "discovered_tool_py_get_signature"
decision = "allow"
priority = 100
description = "Allow discovered py_get_signature tool."
[[rule]]
toolName = "discovered_tool_py_get_skeleton"
decision = "allow"
priority = 100
description = "Allow discovered py_get_skeleton tool."
[[rule]]
toolName = "discovered_tool_py_get_var_declaration"
decision = "allow"
priority = 100
description = "Allow discovered py_get_var_declaration tool."
[[rule]]
toolName = "discovered_tool_py_set_signature"
decision = "allow"
priority = 100
description = "Allow discovered py_set_signature tool."
[[rule]]
toolName = "discovered_tool_py_set_var_declaration"
decision = "allow"
priority = 100
description = "Allow discovered py_set_var_declaration tool."
[[rule]]
toolName = "discovered_tool_py_update_definition"
decision = "allow"
priority = 100
description = "Allow discovered py_update_definition tool."
[[rule]]
toolName = "discovered_tool_read_file"
decision = "allow"
priority = 100
description = "Allow discovered read_file tool."
[[rule]]
toolName = "discovered_tool_run_powershell"
decision = "allow"
priority = 100
description = "Allow discovered run_powershell tool."
[[rule]]
toolName = "discovered_tool_search_files"
decision = "allow"
priority = 100
description = "Allow discovered search_files tool."
[[rule]]
toolName = "discovered_tool_set_file_slice"
decision = "allow"
priority = 100
description = "Allow discovered set_file_slice tool."
[[rule]]
toolName = "discovered_tool_web_search"
decision = "allow"
priority = 100
description = "Allow discovered web_search tool."
[[rule]]
toolName = "run_powershell"
decision = "allow"
priority = 100
description = "Allow the base run_powershell tool with maximum priority."
[[rule]]
toolName = "activate_skill"
decision = "allow"
priority = 990
description = "Allow activate_skill."
[[rule]]
toolName = "ask_user"
decision = "allow"
priority = 990
description = "Allow ask_user."
[[rule]]
toolName = "cli_help"
decision = "allow"
priority = 990
description = "Allow cli_help."
[[rule]]
toolName = "codebase_investigator"
decision = "allow"
priority = 990
description = "Allow codebase_investigator."
[[rule]]
toolName = "replace"
decision = "allow"
priority = 990
description = "Allow replace."
[[rule]]
toolName = "glob"
decision = "allow"
priority = 990
description = "Allow glob."
[[rule]]
toolName = "google_web_search"
decision = "allow"
priority = 990
description = "Allow google_web_search."
[[rule]]
toolName = "read_file"
decision = "allow"
priority = 990
description = "Allow read_file."
[[rule]]
toolName = "list_directory"
decision = "allow"
priority = 990
description = "Allow list_directory."
[[rule]]
toolName = "save_memory"
decision = "allow"
priority = 990
description = "Allow save_memory."
[[rule]]
toolName = "grep_search"
decision = "allow"
priority = 990
description = "Allow grep_search."
[[rule]]
toolName = "run_shell_command"
decision = "allow"
priority = 990
description = "Allow run_shell_command."
[[rule]]
toolName = "tier1-orchestrator"
decision = "allow"
priority = 990
description = "Allow tier1-orchestrator."
[[rule]]
toolName = "tier2-tech-lead"
decision = "allow"
priority = 990
description = "Allow tier2-tech-lead."
[[rule]]
toolName = "tier3-worker"
decision = "allow"
priority = 990
description = "Allow tier3-worker."
[[rule]]
toolName = "tier4-qa"
decision = "allow"
priority = 990
description = "Allow tier4-qa."
[[rule]]
toolName = "web_fetch"
decision = "allow"
priority = 990
description = "Allow web_fetch."
[[rule]]
toolName = "write_file"
decision = "allow"
priority = 990
description = "Allow write_file."

View File

@@ -1,22 +0,0 @@
[[rule]]
toolName = [
"read_file",
"write_file",
"replace",
"list_directory",
"glob",
"grep_search",
"search_files",
"get_file_summary",
"google_web_search",
"web_fetch",
"codebase_investigator",
"cli_help",
"activate_skill",
"run_shell_command",
"run_powershell",
"discovered_tool_run_powershell"
]
decision = "allow"
priority = 900
description = "Allow all MMA tools for sub-agents in headless mode."