mirror of
https://github.com/microsoft/vscode.git
synced 2026-08-27 12:56:39 +01:00
* Add valid permissions presets to mock-policy-server Add five new managedSettings presets exercising the SDK's managed permissions schema (deny/ask/allow rule lists and both disableBypassPermissionsMode values), validated against copilot-agent-runtime's managed-settings-schema.json and rule parser: - allow-auto-only: disableBypassPermissionsMode='allow-auto-only' - deny-dangerous-commands: deny list blocking shell/write/domain rules - ask-before-publish: ask list requiring approval without blocking - lockdown-allowlist: allow list intersection combined with deny - Clarified the existing disable-bypass-permissions description Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Add workspace-scoped permission preset Add examples using the managed permission syntax where a single leading slash scopes file rules to the workspace root. Also correct existing examples that described workspace-scoped rules as system paths. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Clarify permission preset scopes Document both managed bypass permission enum values and clarify that Write(~/**) covers the user home directory, including workspaces beneath it, not every path outside the workspace. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>