Set Task Scope
set_task_scopeDeclare the allowed file scope for a task so ThumbGate can block edits outside it, or clear the current scope. Optionally add a time-bounded lease that auto-expires.
Instructions
Declare or clear the current task scope so ThumbGate can compare affected files and diffs against the approved path set.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| clear | No | Clear the current task scope instead of setting one | |
| ttlMs | No | Optional lease length in milliseconds. With it the scope becomes time-bounded authority (e.g. 90000 for "write under ./src for 90 seconds") and FAILS CLOSED on expiry: a lapsed lease authorises nothing until renewed. Omit for a permanent scope. Clamped to 60s..24h. | |
| taskId | No | Optional stable task identifier (ticket, issue, or work item id) | |
| summary | No | Short summary of the task being worked | |
| repoPath | No | Optional repo root used when evaluating git diff scope | |
| localOnly | No | When true, also marks the task as local-only | |
| allowedPaths | No | Glob patterns that define the allowed file scope for this task | |
| protectedPaths | No | Optional protected-file globs that require explicit approval before editing or publishing | |
| workflowContract | No | Optional deterministic workflow run contract. Supports workflowId, allowedBranches, blockedActions, requiredEvidence, and completionGate. |