Remove command permission lookup

src/agentci/adapters/gitea.py

@@ -34,13 +34,6 @@ class GiteaClient:
     async def close(self) -> None:
         await self.client.aclose()
 
-    async def has_write_permission(self, owner: str, repo: str, username: str) -> bool:
-        response = await self._request(
-            "GET", f"/repos/{owner}/{repo}/collaborators/{username}/permission"
-        )
-        permission = str(response.json().get("permission", "")).lower()
-        return permission in {"write", "admin", "owner"}
-
     async def repository(self, owner: str, repo: str) -> RepositoryInfo:
         data = (await self._request("GET", f"/repos/{owner}/{repo}")).json()
         return RepositoryInfo(

src/agentci/api/webhook.py

@@ -70,19 +70,6 @@ async def _handle_command(container: Any, event: CommandEvent) -> Response:
     if not event.body.strip().startswith("/agent"):
         return Response(status_code=status.HTTP_204_NO_CONTENT)
     log.info("agent command received", extra=extra)
-    permitted = await container.gitea.has_write_permission(
-        event.repo_owner, event.repo_name, event.requester
-    )
-    if not permitted:
-        log.warning("agent command rejected: insufficient permission", extra=extra)
-        if await container.storage.record_delivery(event.delivery_id, event.comment_id):
-            await container.gitea.create_comment(
-                event.repo_owner,
-                event.repo_name,
-                event.issue_number,
-                "Agent command rejected: repository write permission is required.",
-            )
-        return Response(status_code=status.HTTP_202_ACCEPTED)
     try:
         command = parse_command(event.body)
     except CommandError as exc: