5407a1d235
Self-Close: Pane-Wrapper (herdr-self-close.nix), Rollenverträge und Claude-Settings für graphics/administrator/agent-manager/orga, mit Regressionstests in agents/tests/roles.sh. Reviewer bleibt bewusst ausgeschlossen (read-only, keine Aktivierungsfreigabe). Eskalationsentwurf (docs/herdr-eskalation-review-entwurf.md) freigegeben: Reviewer-Pflicht ab Risikoschwelle statt bei jedem Diff, Agent-Manager zusätzlich zum Administrator als Fixer für Rollenvertrags-Blocker (agent-manager.md 2.0.0 -> 2.1.0), Rückfrage-Kanal zunächst nur als Pilot bei Orga (orga.md 2.0.0 -> 2.1.0). Details in docs/herdr-orchestration.md. Begleitende Infrastruktur: agent-codex/orga-agent/finance-agent-Worker, orga-agent-Client und hdm.0ff.space-Klon-Doku. graphify-out/, .agents/ und nvim.log neu gitignored (lokale Tool-Ausgabe/Debris, kein Repo-Inhalt). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_011uSxdbo8zykSeH5WCMmbvp
37 lines
917 B
JSON
37 lines
917 B
JSON
{
|
|
"permissions": {
|
|
"defaultMode": "dontAsk",
|
|
"allow": [
|
|
"Read(**)",
|
|
"Glob(**)",
|
|
"Grep(**)",
|
|
"Edit(**)",
|
|
"Write(**)",
|
|
"Bash(nix eval *)",
|
|
"Bash(nix build *)",
|
|
"Bash(nix flake check *)",
|
|
"Bash(nix store diff-closures *)",
|
|
"Bash(git diff *)",
|
|
"Bash(git status *)",
|
|
"Bash(journalctl *)",
|
|
"Bash(systemctl status *)",
|
|
"Bash(systemctl is-active *)",
|
|
"Bash(systemctl is-enabled *)",
|
|
"Bash(systemctl is-system-running*)",
|
|
"Bash(systemctl show *)",
|
|
"Bash(readlink *)",
|
|
"Bash(/etc/scripts/close-my-pane.sh)"
|
|
],
|
|
"deny": [
|
|
"Bash(sudo *)",
|
|
"Bash(nixos-rebuild switch *)",
|
|
"Bash(nixos-rebuild test *)",
|
|
"Bash(nixos-rebuild dry-activate *)",
|
|
"Bash(git push *)",
|
|
"Bash(git commit *)",
|
|
"Bash(agenix -d *)",
|
|
"Bash(ssh *)",
|
|
"Bash(curl *)"
|
|
]
|
|
}
|
|
}
|