a3s-code-core 8.4.0

A3S Code Core - Embeddable AI agent library with tool execution
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96

//! Specialty AgentStyle permission policies shared by built-in delegated
//! agents and host-selected primary-session styles.

use crate::permissions::{PermissionDecision, PermissionPolicy};
use crate::prompts::AgentStyle;

/// Hard permission policy for an explicit specialty style.
///
/// `GeneralPurpose` returns `None` so the host/session default remains writable.
pub fn specialty_permission_policy(style: AgentStyle) -> Option<PermissionPolicy> {
    match style {
        AgentStyle::GeneralPurpose => None,
        AgentStyle::Explore => Some(explore_permissions()),
        AgentStyle::Plan => Some(plan_permissions()),
        AgentStyle::Verification | AgentStyle::CodeReview => Some(verification_permissions()),
    }
}

fn explore_permissions() -> PermissionPolicy {
    let mut policy = PermissionPolicy::new()
        .allow_all(&[
            "read",
            "search",
            "ls",
            "web_fetch",
            "web_search",
            "update_plan",
        ])
        .deny_all(&["write", "edit", "download", "task", "parallel_task"])
        .allow("Bash(ls:*)")
        .allow("Bash(cat:*)")
        .allow("Bash(head:*)")
        .allow("Bash(tail:*)")
        .allow("Bash(find:*)")
        .allow("Bash(wc:*)")
        .deny("Bash(rm:*)")
        .deny("Bash(mv:*)")
        .deny("Bash(cp:*)");
    policy.default_decision = PermissionDecision::Deny;
    policy
}

fn plan_permissions() -> PermissionPolicy {
    let mut policy = PermissionPolicy::new()
        .allow_all(&["read", "search", "ls", "update_plan"])
        .deny_all(&["write", "edit", "download", "bash", "task", "parallel_task"]);
    policy.default_decision = PermissionDecision::Deny;
    policy
}

fn verification_permissions() -> PermissionPolicy {
    let mut policy = PermissionPolicy::new()
        .allow_all(&[
            "read",
            "search",
            "ls",
            "bash",
            "web_fetch",
            "web_search",
            "update_plan",
        ])
        .deny_all(&["write", "edit", "download", "task", "parallel_task"]);
    policy.default_decision = PermissionDecision::Deny;
    policy
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::permissions::PermissionChecker;
    use serde_json::json;

    #[test]
    fn explore_keeps_read_visible_and_denies_write() {
        let policy = specialty_permission_policy(AgentStyle::Explore).expect("explore policy");
        assert!(policy.expose_to_model("read"));
        assert!(policy.expose_to_model("update_plan"));
        assert!(!policy.expose_to_model("write"));
        assert_eq!(
            policy.check("write", &json!({"file_path": "x", "content": "y"})),
            PermissionDecision::Deny
        );
    }

    #[test]
    fn plan_style_exposes_update_plan() {
        let policy = specialty_permission_policy(AgentStyle::Plan).expect("plan policy");
        assert!(policy.expose_to_model("update_plan"));
        assert!(!policy.expose_to_model("write"));
    }

    #[test]
    fn general_purpose_has_no_specialty_overlay() {
        assert!(specialty_permission_policy(AgentStyle::GeneralPurpose).is_none());
    }
}