thzxx
d39f390be4
fix: 补全5个工具的权限策略 — task_manager/delegate_task 等不再被拦截
根因:DEFAULT_POLICIES 只配置了10个工具的策略,file_editor、code_search、
diff_viewer、task_manager、delegate_task 这5个工具未配置策略,
PolicyEngine.checkAuthorization 对无策略工具返回 authorized: false,
导致 "Blocked: No policy configured for tool" 错误。
新增策略(按工具风险级别配置):
- file_editor: WRITE + deniedPatterns(系统目录/MEMORY.md) + requireConfirmation + maxFrequency 10
- code_search: READ(只读搜索)
- diff_viewer: READ(只读对比)
- task_manager: WRITE(数据库读写,低风险)
- delegate_task: EXTERNAL_ACTION + maxFrequency 5(启动 SubAgent)
2026-07-12 20:23:56 +08:00
..
2026-07-06 22:48:33 +08:00
2026-07-12 19:46:47 +08:00
2026-07-12 19:46:47 +08:00
2026-07-12 19:46:47 +08:00
2026-07-12 19:46:47 +08:00
2026-07-12 14:20:05 +08:00
2026-07-12 20:23:56 +08:00
2026-07-12 19:46:47 +08:00
2026-07-12 19:46:47 +08:00
2026-07-12 12:54:52 +08:00
2026-07-12 14:20:05 +08:00
2026-07-12 19:46:47 +08:00