fix(core): explicitly allow codebase_investigator and cli_help in read-only mode (google-gemini#21157)

Adib234 · kunal-10-cloud · commit 5227db003f2a · 2026-03-12T19:17:14.000+05:30
diff --git a/packages/core/src/policy/policies/read-only.toml b/packages/core/src/policy/policies/read-only.toml
@@ -51,3 +51,8 @@ priority = 50
 toolName = "google_web_search"
 decision = "allow"
 priority = 50
+
+[[rule]]
+toolName = ["codebase_investigator", "cli_help"]
+decision = "allow"
+priority = 50
