1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31
//! Host product policy defaults for telekinesis (pi coding-agent layer). //! Engine (rx4) only matches; this module fills host-owned shell lists. use rx4::Policy; /// Tele default coding policy: workspace write + OS sandbox + safe shell allows. pub fn tele_coding_policy() -> Policy { Policy::workspace_write() .with_os_sandbox(true) .with_shell_allow([ "git *", "cargo test*", "cargo check*", "cargo build*", "cargo clippy*", "cargo fmt*", "rg *", "fd *", "ls *", "pwd", "cat *", "head *", "tail *", "wc *", ]) .with_shell_deny([ "sudo *", "rm -rf /*", "rm -rf /", ]) }