zesdex/apps/domain/src/subagent/mod.rs

//! Subagent domain models.

/// Access tier for subagent tool permissions.
///
/// Tiers are cumulative: `Write` includes everything in `Read`, and `Full`
/// includes everything in `Write`.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum AccessTier {
    /// Read-only: search, read, glob, utility tools (no mutations).
    Read,
    /// Read + Write: above plus write, edit, delete, git, memory.
    Write,
    /// Full: above plus bash, shell, workflow, plan tools.
    Full,
}