fix(policy): allow codebase_investigator by default in read-only policy (#15000)

abhipatel12 · gemini-cli-robot · commit e9246d750ee0 · 2025-12-12T17:58:30.000Z
diff --git a/packages/core/src/policy/policies/read-only.toml b/packages/core/src/policy/policies/read-only.toml
@@ -54,3 +54,8 @@ priority = 50
 toolName = "google_web_search"
 decision = "allow"
 priority = 50
+
+[[rule]]
+toolName = "codebase_investigator"
+decision = "allow"
+priority = 50
