From 12cbe320e44b236919eead036c5e326c4d167100 Mon Sep 17 00:00:00 2001
From: Abhi <43648792+abhipatel12@users.noreply.github.com>
Date: Fri, 12 Dec 2025 12:22:27 -0500
Subject: [PATCH] fix(policy): allow codebase_investigator by default in
 read-only policy (#15000)

---
 packages/core/src/policy/policies/read-only.toml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/packages/core/src/policy/policies/read-only.toml b/packages/core/src/policy/policies/read-only.toml
index 0c36faf003..a1a8ee1776 100644
--- a/packages/core/src/policy/policies/read-only.toml
+++ b/packages/core/src/policy/policies/read-only.toml
@@ -54,3 +54,8 @@ priority = 50
 toolName = "google_web_search"
 decision = "allow"
 priority = 50
+
+[[rule]]
+toolName = "codebase_investigator"
+decision = "allow"
+priority = 50