100 lines
2.6 KiB
TOML
100 lines
2.6 KiB
TOML
cli_auth_credentials_store = "file"
|
|
approval_policy = "never"
|
|
check_for_update_on_startup = false
|
|
web_search = "disabled"
|
|
default_permissions = "agentci-read"
|
|
developer_instructions = """
|
|
A custom research subagent named `research` is available in every workflow. Delegate focused
|
|
external research to it when current documentation, web evidence, or public code examples would
|
|
materially improve the plan or implementation. Keep repository analysis and edits in the parent.
|
|
Use CodeGraph for repository architecture, symbol relationships, and change-impact analysis when
|
|
it is useful. It is available to planning, implementation, and review agents, but not research.
|
|
"""
|
|
|
|
[mcp_servers.codegraph]
|
|
command = "codegraph"
|
|
args = ["serve", "--mcp"]
|
|
startup_timeout_sec = 60
|
|
tool_timeout_sec = 60
|
|
|
|
[mcp_servers.codegraph.env]
|
|
CODEGRAPH_TELEMETRY = "0"
|
|
|
|
[agents]
|
|
max_threads = 4
|
|
max_depth = 1
|
|
|
|
[shell_environment_policy]
|
|
inherit = "core"
|
|
exclude = ["*TOKEN*", "*SECRET*", "*KEY*", "AGENTCI_*", "GITEA_*"]
|
|
|
|
[permissions.agentci-read]
|
|
description = "Read a workflow repository without modifying it or using the network."
|
|
|
|
[permissions.agentci-read.filesystem]
|
|
":minimal" = "read"
|
|
glob_scan_max_depth = 5
|
|
|
|
[permissions.agentci-read.filesystem.":workspace_roots"]
|
|
"." = "read"
|
|
".git" = "read"
|
|
"**/*.env" = "deny"
|
|
|
|
[permissions.agentci-review]
|
|
description = "Review scoped workflow material and query Gitea with tea without editing files."
|
|
|
|
[permissions.agentci-review.filesystem]
|
|
":minimal" = "read"
|
|
glob_scan_max_depth = 5
|
|
|
|
[permissions.agentci-review.filesystem.":workspace_roots"]
|
|
"." = "read"
|
|
".git" = "read"
|
|
"**/*.env" = "deny"
|
|
|
|
[permissions.agentci-review.network]
|
|
enabled = true
|
|
allow_local_binding = false
|
|
|
|
[permissions.agentci-review.network.domains]
|
|
"*" = "allow"
|
|
|
|
[permissions.agentci-write]
|
|
description = "Edit a workflow repository without changing Git metadata."
|
|
|
|
[permissions.agentci-write.filesystem]
|
|
":minimal" = "read"
|
|
"/var/lib/agentci/dev-tools" = "read"
|
|
glob_scan_max_depth = 5
|
|
|
|
[permissions.agentci-write.filesystem.":workspace_roots"]
|
|
"." = "write"
|
|
".git" = "read"
|
|
"**/*.env" = "deny"
|
|
|
|
[permissions.agentci-write.network]
|
|
enabled = true
|
|
allow_local_binding = false
|
|
|
|
[permissions.agentci-write.network.domains]
|
|
"*" = "allow"
|
|
|
|
[permissions.agentci-research]
|
|
description = "Read a workflow repository and research public internet sources without editing."
|
|
|
|
[permissions.agentci-research.filesystem]
|
|
":minimal" = "read"
|
|
glob_scan_max_depth = 5
|
|
|
|
[permissions.agentci-research.filesystem.":workspace_roots"]
|
|
"." = "read"
|
|
".git" = "read"
|
|
"**/*.env" = "deny"
|
|
|
|
[permissions.agentci-research.network]
|
|
enabled = true
|
|
allow_local_binding = false
|
|
|
|
[permissions.agentci-research.network.domains]
|
|
"*" = "allow"
|