Implement granular tool permissions (#82)

* Granular tool permissions * Fix build * Start on UI * Fixes * Fmt * Go ham on UI * Update migrations * Considate wiki files * Clean up * More tweaks. Docs. * Consolidate collab and noncollab * Fix build * Restrict for non-collaborators
2026-01-15 08:05:30 +00:00
parent 4547b0032e
commit 97dce099c1
29 changed files with 800 additions and 2052 deletions
@@ -9,12 +9,21 @@ import { Inputs, main } from "../main.ts";

 async function run(): Promise<void> {
  try {
+    // granular tool permissions (empty string means not set, use default)
+    const web = core.getInput("web") || undefined;
+    const search = core.getInput("search") || undefined;
+    const write = core.getInput("write") || undefined;
+    const bash = core.getInput("bash") || undefined;
+
    const inputs = Inputs.assert({
      prompt: core.getInput("prompt", { required: true }),
      effort: core.getInput("effort") || "auto",
      agent: core.getInput("agent") || null,
-      sandbox: core.getInput("sandbox") === "true" ? true : undefined,
      cwd: core.getInput("cwd") || null,
+      web,
+      search,
+      write,
+      bash,
    });

    const result = await main(inputs);