gnoma

Files

vikingowl ea4996c663 feat: add permission system with 6 modes and compound command parsing

6 permission modes:
- default: prompt for every tool invocation
- accept_edits: auto-allow file ops, prompt for bash/destructive
- bypass: allow everything (deny rules still enforced)
- deny: deny all unless explicit allow rule
- plan: read-only tools only
- auto: auto-allow read-only, prompt for writes

7-step decision flow: deny rules (bypass-immune) → safety checks
(.env, .git, credentials, ssh keys) → bypass → allow rules →
mode-specific → prompt.

Compound bash command decomposition via mvdan.cc/sh AST parser.
Splits on && and || but preserves pipes as single units.
Deny from any subcommand denies the entire compound.

15 permission tests.

2026-04-03 14:58:14 +02:00

config

feat: add TOML config system with layered loading

2026-04-03 13:51:03 +02:00

engine

feat: add router foundation with task classification and arm selection

2026-04-03 14:23:15 +02:00

message

feat: add foundation types, streaming, and provider interface

2026-04-03 10:57:54 +02:00

permission

feat: add permission system with 6 modes and compound command parsing