policies / junie.yml
Junie CLI Policy
Allows access to the minimum binaries and locations needed by Junie CLI. Intentionally does NOT include any additional, potentially invasive tools like sh, bash, git, etc.
Include
stonewall policy include https://stonewall.sh/policies/junie.ymlSource
# $schema: https://stonewall.sh/schema.json
####################################################################################
# This is an official stonewall.sh policy and should not be changed locally. #
# Please always review remote policies before applying them. Stonewall and its #
# policies come without warranty of any kind. See LICENSE for details. #
####################################################################################
policy:
name: Junie CLI
url: https://stonewall.sh/policies/junie.yml
tier: 3
tags:
- coding-agent
- jetbrains
description: >
Allows access to the minimum binaries and locations needed by Junie CLI.
Intentionally does NOT include any additional, potentially invasive tools like
sh, bash, git, etc.
bin:
allowed:
- junie
- basename
- readlink
- security
expose:
write:
- ~/.junie
- ~/.local/share/junie