42 lines
953 B
JSON
42 lines
953 B
JSON
{
|
|
"permissions": {
|
|
"defaultMode": "dontAsk",
|
|
"allow": [
|
|
"Read(**)",
|
|
"Glob(**)",
|
|
"Grep(**)",
|
|
"WebSearch",
|
|
"WebFetch",
|
|
"Edit(docs/research/*.md)",
|
|
"Bash(/etc/scripts/close-my-pane.sh)",
|
|
"Bash(*)"
|
|
],
|
|
"deny": [
|
|
"Edit(.git/**)",
|
|
"Edit(agents/**)",
|
|
"Edit(hosts/**)",
|
|
"Edit(home/**)",
|
|
"Edit(secrets/**)",
|
|
"Bash(sudo *)",
|
|
"Bash(git commit *)",
|
|
"Bash(git push *)",
|
|
"Bash(agenix *)",
|
|
"Bash(ssh *)",
|
|
"Bash(rm *)",
|
|
"Bash(mv *)",
|
|
"Bash(chmod *)",
|
|
"Bash(chown *)",
|
|
"Bash(kill *)",
|
|
"Bash(systemctl start *)",
|
|
"Bash(systemctl stop *)",
|
|
"Bash(systemctl restart *)",
|
|
"Bash(systemctl enable *)",
|
|
"Bash(systemctl disable *)",
|
|
"Bash(nixos-rebuild switch *)",
|
|
"Bash(nixos-rebuild test *)",
|
|
"Bash(nix build *)",
|
|
"Bash(reboot*)",
|
|
"Bash(shutdown *)"
|
|
]
|
|
}
|
|
}
|