권한 코어를 claude-code 기준으로 재구성하고 slash palette 상태 분리를 시작\n\n- Default/AcceptEdits/Plan/BypassPermissions/DontAsk/Deny 권한 모드를 추가하고 기존 Ask/Auto 호환을 유지\n- deny 우선 패턴 규칙, allow/override, 글로벌 모드 순서의 권한 해석 체계를 정리\n- file_write/file_edit/file_manage와 process/build_run/test_loop/snippet_runner/spawn_agent 계열을 권한 클래스별로 분리\n- AcceptEdits는 파일 편집 도구 자동 허용, process 계열은 계속 확인하도록 조정\n- Plan은 쓰기 도구를 차단하고 읽기 중심 진행이 되도록 보강\n- BypassPermissions와 DontAsk는 권한 확인을 생략하는 경로로 정규화\n- AX Agent 권한 팝업, 상단 배너, slash 명령 결과를 새 권한 체계에 맞게 정리\n- /permissions, /allowed-tools, /sandbox-toggle 사용법과 상태 출력을 갱신\n- ChatWindow의 slash palette 상태를 전용 SlashPaletteState로 분리해 이후 composer 개편 기반을 마련\n- AppState, 설정 모델, 테스트를 새 권한 체계에 맞게 갱신\n- dotnet build 경고 0 / 오류 0, dotnet test 436 통과를 확인

src/AxCopilot/Services/Agent/IAgentTool.cs

@@ -95,8 +95,22 @@ public class AgentContext
     private static readonly HashSet<string> DangerousAutoTools = new(StringComparer.OrdinalIgnoreCase)
     {
         "process",
+        "build_run",
         "spawn_agent",
         "snippet_runner",
+        "test_loop",
+    };
+    private static readonly HashSet<string> WriteTools = new(StringComparer.OrdinalIgnoreCase)
+    {
+        "file_write", "file_edit", "file_manage",
+        "html_create", "markdown_create", "docx_create", "excel_create", "csv_create", "pptx_create",
+        "chart_create", "script_create", "document_assemble", "format_convert", "template_render", "checkpoint",
+        "todo_write", "skill_manager", "project_rule", "task_create", "task_update", "task_stop",
+        "team_create", "team_delete", "cron_create", "cron_delete", "zip",
+    };
+    private static readonly HashSet<string> ProcessLikeTools = new(StringComparer.OrdinalIgnoreCase)
+    {
+        "process", "build_run", "test_loop", "snippet_runner", "spawn_agent", "git_tool",
     };
 
     private readonly object _permissionLock = new();
@@ -104,10 +118,10 @@ public class AgentContext
     /// <summary>작업 폴더 경로.</summary>
     public string WorkFolder { get; set; } = "";
 
-    /// <summary>파일 접근 권한. Ask | Plan | Auto | Deny</summary>
-    public string Permission { get; init; } = "Ask";
+    /// <summary>파일 접근 권한. Default | AcceptEdits | Plan | BypassPermissions | DontAsk | Deny</summary>
+    public string Permission { get; init; } = "Default";
 
-    /// <summary>도구별 권한 오버라이드. 키: 도구명, 값: "ask" | "auto" | "deny".</summary>
+    /// <summary>도구별 권한 오버라이드. 키: 도구명 또는 tool@pattern, 값: 권한 모드.</summary>
     public Dictionary<string, string> ToolPermissions { get; init; } = new();
 
     /// <summary>차단 경로 패턴 목록.</summary>
@@ -201,22 +215,22 @@ public class AgentContext
         var normalizedToolName = toolName.Trim();
 
         if (TryResolvePatternPermission(toolName, target, out var patternPermission))
-            return ApplyDangerousAutoGuard(normalizedToolName, PermissionModeCatalog.NormalizeToolOverride(patternPermission));
+            return ResolveModeForTool(normalizedToolName, PermissionModeCatalog.NormalizeToolOverride(patternPermission));
 
         if (ToolPermissions.TryGetValue(toolName, out var toolPerm) &&
             !string.IsNullOrWhiteSpace(toolPerm))
-            return ApplyDangerousAutoGuard(normalizedToolName, PermissionModeCatalog.NormalizeToolOverride(toolPerm));
+            return ResolveModeForTool(normalizedToolName, PermissionModeCatalog.NormalizeToolOverride(toolPerm));
         if (ToolPermissions.TryGetValue("*", out var wildcardPerm) &&
             !string.IsNullOrWhiteSpace(wildcardPerm))
-            return ApplyDangerousAutoGuard(normalizedToolName, PermissionModeCatalog.NormalizeToolOverride(wildcardPerm));
+            return ResolveModeForTool(normalizedToolName, PermissionModeCatalog.NormalizeToolOverride(wildcardPerm));
         if (ToolPermissions.TryGetValue("default", out var defaultPerm) &&
             !string.IsNullOrWhiteSpace(defaultPerm))
-            return ApplyDangerousAutoGuard(normalizedToolName, PermissionModeCatalog.NormalizeToolOverride(defaultPerm));
+            return ResolveModeForTool(normalizedToolName, PermissionModeCatalog.NormalizeToolOverride(defaultPerm));
 
         var fallback = SensitiveTools.Contains(toolName)
             ? PermissionModeCatalog.NormalizeGlobalMode(Permission)
-            : PermissionModeCatalog.Auto;
-        return ApplyDangerousAutoGuard(normalizedToolName, fallback);
+            : PermissionModeCatalog.AcceptEdits;
+        return ResolveModeForTool(normalizedToolName, fallback);
     }
 
     public async Task<bool> CheckToolPermissionAsync(string toolName, string target)
@@ -256,6 +270,30 @@ public class AgentContext
         var normalizedTool = toolName.Trim();
         var normalizedTarget = target.Trim();
 
+        foreach (var kv in ToolPermissions)
+        {
+            if (TryParsePatternRule(kv.Key, out var ruleTool, out var rulePattern)
+                && string.Equals(ruleTool, normalizedTool, StringComparison.OrdinalIgnoreCase)
+                && WildcardMatch(normalizedTarget, rulePattern)
+                && PermissionModeCatalog.IsDeny(kv.Value))
+            {
+                permission = kv.Value.Trim();
+                return true;
+            }
+        }
+
+        foreach (var kv in ToolPermissions)
+        {
+            if (TryParsePatternRule(kv.Key, out var ruleTool, out var rulePattern)
+                && string.Equals(ruleTool, "*", StringComparison.Ordinal)
+                && WildcardMatch(normalizedTarget, rulePattern)
+                && PermissionModeCatalog.IsDeny(kv.Value))
+            {
+                permission = kv.Value.Trim();
+                return true;
+            }
+        }
+
         foreach (var kv in ToolPermissions)
         {
             if (TryParsePatternRule(kv.Key, out var ruleTool, out var rulePattern)
@@ -308,15 +346,63 @@ public class AgentContext
         return Regex.IsMatch(input, regex, RegexOptions.IgnoreCase | RegexOptions.CultureInvariant);
     }
 
+    private string ResolveModeForTool(string toolName, string mode)
+    {
+        if (string.IsNullOrWhiteSpace(toolName))
+            return mode;
+
+        var normalizedMode = PermissionModeCatalog.NormalizeGlobalMode(mode);
+        if (PermissionModeCatalog.IsDeny(normalizedMode))
+            return PermissionModeCatalog.Deny;
+
+        if (PermissionModeCatalog.IsBypassPermissions(normalizedMode) || PermissionModeCatalog.IsDontAsk(normalizedMode))
+            return normalizedMode;
+
+        if (PermissionModeCatalog.IsPlan(normalizedMode))
+        {
+            if (IsWriteTool(toolName))
+                return PermissionModeCatalog.Deny;
+
+            return IsProcessLikeTool(toolName)
+                ? PermissionModeCatalog.Default
+                : PermissionModeCatalog.AcceptEdits;
+        }
+
+        if (PermissionModeCatalog.IsAcceptEdits(normalizedMode))
+        {
+            if (IsWriteTool(toolName))
+                return PermissionModeCatalog.AcceptEdits;
+
+            return IsProcessLikeTool(toolName)
+                ? PermissionModeCatalog.Default
+                : ApplyDangerousAutoGuard(toolName, PermissionModeCatalog.AcceptEdits);
+        }
+
+        if (PermissionModeCatalog.IsDefault(normalizedMode))
+        {
+            if (!SensitiveTools.Contains(toolName))
+                return PermissionModeCatalog.AcceptEdits;
+
+            return ApplyDangerousAutoGuard(toolName, PermissionModeCatalog.Default);
+        }
+
+        return ApplyDangerousAutoGuard(toolName, normalizedMode);
+    }
+
+    private static bool IsWriteTool(string toolName) => WriteTools.Contains(toolName);
+
+    private static bool IsProcessLikeTool(string toolName) => ProcessLikeTools.Contains(toolName);
+
     private string ApplyDangerousAutoGuard(string toolName, string permission)
     {
         if (string.IsNullOrWhiteSpace(toolName))
             return permission;
 
         if (PermissionModeCatalog.IsAuto(permission)
-            && PermissionModeCatalog.IsAuto(Permission)
+            && !PermissionModeCatalog.IsBypassPermissions(permission)
+            && !PermissionModeCatalog.IsDontAsk(permission)
             && DangerousAutoTools.Contains(toolName))
-            return "ask";
+            return PermissionModeCatalog.Default;
 
         return permission;
     }