Fimeg/letta-code
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

feat(permissions): generalize approve-always rules for gh CLI commands (#1240)

Browse Source
This commit is contained in:
Cameron
2026-03-03 11:45:18 -08:00
committed by GitHub
parent d0b7c1fb8a
commit 5bd09dd17d
3 changed files with 193 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/permissions/readOnlyShell.ts
View File

@@ -100,7 +100,7 @@ const SAFE_LETTA_COMMANDS: Record<string, Set<string>> = {
// gh CLI read-only commands: category -> allowed actions
// null means any action is allowed for that category
const SAFE_GH_COMMANDS: Record<string, Set<string> | null> = {
export const SAFE_GH_COMMANDS: Record<string, Set<string> | null> = {
pr: new Set(["list", "status", "checks", "diff", "view"]),
issue: new Set(["list", "status", "view"]),
repo: new Set(["list", "view", "gitignore", "license"]),