Files
vscode/scripts
1faca48a3e Add valid permissions presets to mock-policy-server (#332590)
* Add valid permissions presets to mock-policy-server

Add five new managedSettings presets exercising the SDK's managed
permissions schema (deny/ask/allow rule lists and both
disableBypassPermissionsMode values), validated against
copilot-agent-runtime's managed-settings-schema.json and rule parser:

- allow-auto-only: disableBypassPermissionsMode='allow-auto-only'
- deny-dangerous-commands: deny list blocking shell/write/domain rules
- ask-before-publish: ask list requiring approval without blocking
- lockdown-allowlist: allow list intersection combined with deny
- Clarified the existing disable-bypass-permissions description

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add workspace-scoped permission preset

Add examples using the managed permission syntax where a single leading
slash scopes file rules to the workspace root. Also correct existing
examples that described workspace-scoped rules as system paths.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Clarify permission preset scopes

Document both managed bypass permission enum values and clarify that
Write(~/**) covers the user home directory, including workspaces beneath it,
not every path outside the workspace.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-08-25 12:33:40 -07:00
..
2026-06-09 23:48:23 +02:00