Skip to content

docs: document github_policy deny_force_push parameter #442

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
omnigent-ci wants to merge 1 commit into
base: 0.9-docs
Choose a base branch
from
Open

docs: document github_policy deny_force_push parameter #442

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion app/docs/policies/builtin/page.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ All builtin policies live under `omnigent.policies.builtins`.
| `enforce_sandbox` | Forces a sandbox configuration on agent start. | `sandbox_type`, `allow_network`, `write_paths`, `read_paths` |
| `gcalendar_policy` | Controls Google Calendar. Defaults to read-only. | None |
| `gdrive_policy` | Controls Google Drive, Docs, Sheets, and Slides access. Writes restricted to agent-created files by default. Optionally enforces Bell-LaPadula "no write-down": once the session reads a confidential file, its writes are confined to that set. | `read_all`, `allow_create`, `write_files`, `read_files`, `comment_files`, `confidential_files` (string[]), `write_down_action` (`"DENY"` or `"ASK"`, default `"DENY"`) |
| `github_policy` | Controls GitHub read/write access across MCP tools and shell commands. Irreversible destructive operations (deletes) are denied by default even on allowed repos, unless `allow_destructive` is set. | `read_all`, `write_repos`, `write_branches`, `allow_destructive` (bool, default `false`) |
| `github_policy` | Controls GitHub read/write access across MCP tools and shell commands. Irreversible destructive operations (deletes) are denied by default even on allowed repos, unless `allow_destructive` is set. `git push` force flags (`--force`, `-f`, `--force-with-lease`, `--force-if-includes`), bundled short flags containing `f` (e.g. `-uf`), and `+refspec` force prefixes are denied by default regardless of the repo/branch allowlists, unless `deny_force_push` is set to `false`. | `read_all`, `write_repos`, `write_branches`, `allow_destructive` (bool, default `false`), `deny_force_push` (bool, default `true`) |
| `gmail_policy` | Controls Gmail. Defaults to read + draft, no send. | `allow_read`, `allow_send`, `allow_drafts` |
| `intent_based_authorization` | Records the first user message as the session's intent, then ASKs before any tool call that has no plausible connection to that intent. Requires an `llm:` config block; fails open when none is available. | None |
| `max_tool_calls_per_session` | DENYs after a total tool-call limit is reached. | `limit` (int, default `100`) |
Expand Down
Loading