Skip to content

refactor(plan) Clean default plan toml #25037

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ruomengz merged 1 commit into from
Apr 9, 2026
Merged

refactor(plan) Clean default plan toml #25037

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 3 additions & 16 deletions packages/core/src/policy/policies/plan.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -80,6 +80,9 @@ priority = 40
modes = ["plan"]
denyMessage = "You are in Plan Mode with access to read-only tools. Execution of scripts (including those from skills) is blocked."

# Explicitly allowed tools in Plan Mode (interactive: ask user, non-interactive: deny)
# Priority 50 overrides the catch-all (40) and also ensures we override default tier ALLOW rules (e.g. from read-only.toml).

[[rule]]
toolName = "*"
mcpName = "*"
Expand All @@ -89,15 +92,6 @@ priority = 50
modes = ["plan"]
interactive = true

[[rule]]
toolName = "*"
mcpName = "*"
toolAnnotations = { readOnlyHint = true }
decision = "deny"
priority = 50
modes = ["plan"]
interactive = false

# Allow specific subagents in Plan mode.
# We use argsPattern to match the agent_name argument for invoke_agent.
[[rule]]
Expand All @@ -115,13 +109,6 @@ priority = 50
modes = ["plan"]
interactive = true

[[rule]]
toolName = ["ask_user", "save_memory", "web_fetch", "activate_skill"]
decision = "deny"
priority = 50
modes = ["plan"]
interactive = false

# Allow write_file and replace for .md files in the plans directory (cross-platform)
# We split this into two rules to avoid ReDoS checker issues with nested optional segments.
# This rule handles the case where there is a session ID in the plan file path
Expand Down
Loading