# The "agent-unsafe" policy, installed with blinker: what the agent's
# Unsafe_Bash, and its file tools once you approve, get in every project.
# Each project's unsafe policy includes it, and can change it. Copy it to
# policies/agent-unsafe.policy in blinker's config directory, or use
# /policy global, to change it for every project.

# type  access  pattern
# The project: writable; .env files hidden.
include write
include toolchains
# Cargo's home: readable. State and build caches: writable.
file    read    ${CARGO_HOME:-~/.cargo}
file    write   ${XDG_STATE_HOME:-~/.local/state}
file    write   ${XDG_CACHE_HOME:-~/.cache}
file    write   ~/Library/Caches
file    write   ${CARGO_HOME:-~/.cargo}/registry
file    write   ${CARGO_HOME:-~/.cargo}/git
file    write   ${GOPATH:-~/go}/pkg
file    write   ${GOMODCACHE:-${GOPATH:-~/go}/pkg/mod}
file    write   ${GOCACHE:-${XDG_CACHE_HOME:-~/.cache}/go-build}
file    write   ${npm_config_cache:-~/.npm}

# Asks before connecting anywhere.
host    ask     *

# Tools that run once you approve each call.
tool    allow   Define
tool    allow   Usage
# Writes .git; allow it in agent-safe to commit without asking.
tool    allow   Commit
# A URL can carry anything the model has read.
tool    allow   Fetch