# 权限配置档案：只读模式
# 禁止所有 Shell 命令执行和文件写入操作。
# 加载方式：AGENT_PERMISSION_PROFILE=readonly

[profile]
name = "readonly"
description = "只读访问 — 禁止 Shell 执行、文件写入、论文下载/解析"

[permissions]
deny = [
    "run_bash",
    "file_write",
    "file_edit",
    "download_paper",
    "parse_paper",
    "subagent",
]
allow = [
    "read_file",
    "grep_files",
    "glob_files",
    "search_papers",
    "get_paper_metadata",
    "get_paper_content",
    "rag_search",
    "query_target",
    "load_skill",
]
mode = "default"