fimo 0.12.0-staging.4 → 0.12.0-staging.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/assets/agent-templates/broken-link-sweeper/capabilities.yaml +0 -4
- package/assets/agent-templates/content-translator/capabilities.yaml +0 -2
- package/assets/agent-templates/seo-audit/capabilities.yaml +0 -1
- package/assets/skills/fimo-cli/references/agents.md +5 -12
- package/dist/cli/bundle.json +1 -1
- package/dist/cli/index.js +3 -3
- package/package.json +1 -1
- package/templates/react-router/package.json +1 -1
|
@@ -60,15 +60,14 @@ used. See `references/integrations.md` for project setup, auth, and provider-spe
|
|
|
60
60
|
|
|
61
61
|
## Capabilities
|
|
62
62
|
|
|
63
|
-
Capabilities describe the
|
|
64
|
-
|
|
65
|
-
|
|
63
|
+
Capabilities describe the opt-in Fimo and network actions an agent may take. Managed agents always receive project
|
|
64
|
+
filesystem access, a shell, and the ability to commit their task-environment changes; Fimo owns branch creation and
|
|
65
|
+
publication. If `capabilities.yaml` is absent or empty, the agent has those project-worker tools but no Fimo API
|
|
66
|
+
permissions or web-fetch tool. Once you add a capabilities file, list every Fimo or network permission the agent needs.
|
|
66
67
|
There is no all-capabilities wildcard; keeping the list explicit makes each agent's power reviewable.
|
|
67
68
|
|
|
68
69
|
| Capability | Allows the agent to | Risk |
|
|
69
70
|
| ---------------------------- | ------------------------------------------- | ------------ |
|
|
70
|
-
| `files:read` | Read project files | Low |
|
|
71
|
-
| `files:write` | Write or delete project files | Medium |
|
|
72
71
|
| `cms:read` | Read CMS content | Low |
|
|
73
72
|
| `cms:write` | Create, update, or delete CMS entries | Medium |
|
|
74
73
|
| `cms:schema:read` | Read CMS schemas | Low |
|
|
@@ -81,16 +80,11 @@ There is no all-capabilities wildcard; keeping the list explicit makes each agen
|
|
|
81
80
|
| `webhooks:write` | Create, modify, delete, or trigger webhooks | High |
|
|
82
81
|
| `schedules:read` | Read schedule configs and run history | Low |
|
|
83
82
|
| `schedules:write` | Create, change, or trigger scheduled runs | Critical |
|
|
84
|
-
| `git:read` | Read git state | Low |
|
|
85
|
-
| `git:branch` | Create an agent branch | Medium |
|
|
86
|
-
| `git:commit` | Commit changes to the agent branch | Medium |
|
|
87
|
-
| `git:push` | Push changes to the project remote | High |
|
|
88
83
|
| `fimo:logs:read` | Read production logs | Low |
|
|
89
84
|
| `fimo:analytics:read` | Read analytics data | Low |
|
|
90
85
|
| `fimo:preview:read` | Read a current preview URL | Low |
|
|
91
86
|
| `fimo:deploy` | Trigger a production deploy | Critical |
|
|
92
87
|
| `net:fetch` | Make outbound HTTP requests | Medium |
|
|
93
|
-
| `shell:exec` | Run arbitrary shell commands in the sandbox | High |
|
|
94
88
|
| `agent:delegate` | Invoke declared sub-agents | Medium |
|
|
95
89
|
| `runtime:long_running` | Run beyond the default time limit | High |
|
|
96
90
|
| `runtime:auto_merge` | Auto-merge trivial proposed branches | Critical |
|
|
@@ -99,10 +93,9 @@ If a capability is missing, the related command is denied and the agent should c
|
|
|
99
93
|
blocker. Add the capability to `capabilities.yaml`, run `fimo agents validate <name>`, deploy the bundle, and start a
|
|
100
94
|
new run. A denied capability does not grant access to anything else.
|
|
101
95
|
|
|
102
|
-
Example for a content editor that can read and update entries but cannot change schemas
|
|
96
|
+
Example for a content editor that can read and update entries but cannot change schemas:
|
|
103
97
|
|
|
104
98
|
```yaml
|
|
105
|
-
- files:read
|
|
106
99
|
- cms:read
|
|
107
100
|
- cms:write
|
|
108
101
|
```
|