Policy Format

{
  "agent_name": "coding-agent",
  "permissions": {
    "git": [
      {
        "name": "git_log",
        "policies": [
          {
            "arg_name": "repo_path",
            "match_type": "glob",
            "pattern": "/home/user/projects/**"
          }
        ]
      },
      {
        "name": "git_diff",
        "policies": []
      }
    ],
    "database": [
      {
        "name": "query",
        "policies": [
          {
            "arg_name": "sql",
            "match_type": "regex",
            "pattern": "^SELECT\\s.*"
          }
        ]
      }
    ]
  }
}