cli_auth_credentials_store = "file"
approval_policy = "never"
check_for_update_on_startup = false
web_search = "disabled"
default_permissions = "agentci-read"

[shell_environment_policy]
inherit = "core"
exclude = ["*TOKEN*", "*SECRET*", "*KEY*", "AGENTCI_*", "GITEA_*"]

[permissions.agentci-read]
description = "Read a workflow repository without modifying it or using the network."

[permissions.agentci-read.filesystem]
":minimal" = "read"
glob_scan_max_depth = 5

[permissions.agentci-read.filesystem.":workspace_roots"]
"." = "read"
".git" = "read"
"**/*.env" = "deny"

[permissions.agentci-write]
description = "Edit a workflow repository without changing Git metadata."

[permissions.agentci-write.filesystem]
":minimal" = "read"
glob_scan_max_depth = 5

[permissions.agentci-write.filesystem.":workspace_roots"]
"." = "write"
".git" = "read"
"**/*.env" = "deny"

[permissions.agentci-write.network]
enabled = true
allow_local_binding = false

[permissions.agentci-write.network.domains]
"*" = "allow"