Jinal-Sarvaiya commented on code in PR #149:
URL: https://github.com/apache/camel-kit/pull/149#discussion_r4454046327


##########
kit/camel-kit-core/src/main/resources/templates/opencode/agents/camel-ship-worker.md:
##########
@@ -0,0 +1,22 @@
+---
+name: camel-ship-worker
+description: Read-only Camel Ship stage worker dispatched by the parent 
OpenCode session.
+mode: subagent
+permission:
+  "*": deny
+  mcp: deny
+  read: allow

Review Comment:
   Fixed. Removed the unconditional read: allow from the worker permission 
block. Read, glob, and grep permissions now inherit from the parent session, 
which preserves the host's existing per-path ask/deny rules — including the 
.env approval requirement and any *protected.txt deny rules. The worker no 
longer overrides any parent-level file-read restrictions.



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to