Jinal-Sarvaiya commented on code in PR #149:
URL: https://github.com/apache/camel-kit/pull/149#discussion_r4437668929
##########
kit/camel-kit-core/src/main/resources/templates/opencode/agents/camel-ship-worker.md:
##########
@@ -0,0 +1,18 @@
+---
+name: camel-ship-worker
+description: Read-only Camel Ship stage worker dispatched by the parent
OpenCode session.
+mode: subagent
+permission:
+ edit: deny
+ bash: deny
+ task: deny
Review Comment:
Fixed -- The worker now uses a deny-by-default policy ("*": deny) allowing
only read, glob and grep. This blocks inherited MCP tools regardless of project
or global configuration. Updated the eligibility check in the skill, assertions
in both ShippedAssetStructureTest and OpenCodeGeneratorTest, and aligned
ship.adoc and CHANGELOG.md with the enforced boundary.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
