Policy editor

Each rule specifies an action (click to cycle: any / write_file / run_command), an inline-editable scope glob, and a decision (allow / ask / deny). The editor holds its own working copy and surfaces an unsaved-changes bar the moment anything differs from the last save.

The leading number on each row is its precedence. The agent walks the list top to bottom and stops at the first rule that matches, so a broad rule above a narrow one can hide it entirely.

Below, rule 2 denies writes to src/secrets/** — but rule 1 already allows all of src/** and sits above it, so the deny never fires. Drag rule 2 above rule 1 (or use the move controls) to give the deny precedence and watch the policy change meaning.

Deleting a rule does not remove it outright — it leaves a quiet tombstone in place with an Undo button. Undo restores the rule at its original position; Save clears the tombstones and persists what remains; Discard brings every deleted rule back. Nothing is lost until you choose Save, which keeps a mis-click from silently loosening a policy.

Reordering works entirely from the keyboard. Tab to a row’s drag handle, then:

• Spacelifts the rule
• ↑↓move it up or down
• Spacedrops it in place
• Esccancels and returns the rule to its start

The move-up / move-down arrows beside each row do the same thing in a single click, and are disabled at the ends of the list.

Every mutation is narrated to screen readers. A polite live region announces cycling (“Decision: deny”), deletion (“Rule 3 deleted. Undo available.”), restoration, and discards. Drag-and-drop routes through dnd-kit’s announcement channel, reading the rule summary and its new position (“moved to position 1 of 5”). Decision is never carried by colour alone — the chip always spells out allow / ask / deny, and each row’s accessible label mirrors its visible ordinal.