Every tool call passes a gate first.

How it works

See it run

The code is a checked example from the docs; the output is an example of what it prints.

from shipit_agent import Agent, PermissionEngine

agent = Agent.with_builtins(
    llm=llm,
    permissions=PermissionEngine(
        allow=["Bash(pytest *)", "Bash(git diff *)"],
        deny=["Bash(git push *)", "Read(.env)"],
        ask=["Edit(migrations/**)"],
    ),
)

Go deeper

5 more ways to use it

Each example is from the docs and checked against the library.

from shipit_agent import Agent
from shipit_agent.llms import build_llm_from_env

agent = Agent.with_builtins(llm=build_llm_from_env(), permission_mode="acceptEdits")

What you get

• Modes

  default, acceptEdits, plan and bypass, from read-only planning to full autonomy.

• Rules

  Tool name plus a pattern: Bash(git push *), Edit(migrations/**).

• Deciding in code

  A permission callback approves or refuses each call.

• Approving later

  Queue a call for approval and resume when someone answers.

Agent parameters