|
| 1 | +{ |
| 2 | + "permissions": { |
| 3 | + "allow": [ |
| 4 | + "Read(**)", |
| 5 | + "Write(**)", |
| 6 | + "Edit(**)", |
| 7 | + "WebFetch(*)", |
| 8 | + "Bash(ls:*)", |
| 9 | + "Bash(cat:*)", |
| 10 | + "Bash(head:*)", |
| 11 | + "Bash(tail:*)", |
| 12 | + "Bash(wc:*)", |
| 13 | + "Bash(find:*)", |
| 14 | + "Bash(grep:*)", |
| 15 | + "Bash(rg:*)", |
| 16 | + "Bash(echo:*)", |
| 17 | + "Bash(printf:*)", |
| 18 | + "Bash(test:*)", |
| 19 | + "Bash(true:*)", |
| 20 | + "Bash(false:*)", |
| 21 | + "Bash(which:*)", |
| 22 | + "Bash(where:*)", |
| 23 | + "Bash(whereis:*)", |
| 24 | + "Bash(type:*)", |
| 25 | + "Bash(file:*)", |
| 26 | + "Bash(stat:*)", |
| 27 | + "Bash(readlink:*)", |
| 28 | + "Bash(realpath:*)", |
| 29 | + "Bash(basename:*)", |
| 30 | + "Bash(dirname:*)", |
| 31 | + "Bash(pwd:*)", |
| 32 | + "Bash(cd:*)", |
| 33 | + "Bash(mkdir:*)", |
| 34 | + "Bash(mkdir -p:*)", |
| 35 | + "Bash(cp:*)", |
| 36 | + "Bash(mv:*)", |
| 37 | + "Bash(ln:*)", |
| 38 | + "Bash(touch:*)", |
| 39 | + "Bash(chmod:*)", |
| 40 | + "Bash(chown:*)", |
| 41 | + "Bash(sort:*)", |
| 42 | + "Bash(uniq:*)", |
| 43 | + "Bash(diff:*)", |
| 44 | + "Bash(cmp:*)", |
| 45 | + "Bash(comm:*)", |
| 46 | + "Bash(cut:*)", |
| 47 | + "Bash(tr:*)", |
| 48 | + "Bash(sed:*)", |
| 49 | + "Bash(awk:*)", |
| 50 | + "Bash(xargs:*)", |
| 51 | + "Bash(tee:*)", |
| 52 | + "Bash(rev:*)", |
| 53 | + "Bash(paste:*)", |
| 54 | + "Bash(column:*)", |
| 55 | + "Bash(fold:*)", |
| 56 | + "Bash(fmt:*)", |
| 57 | + "Bash(expand:*)", |
| 58 | + "Bash(unexpand:*)", |
| 59 | + "Bash(nl:*)", |
| 60 | + "Bash(md5sum:*)", |
| 61 | + "Bash(sha256sum:*)", |
| 62 | + "Bash(sha1sum:*)", |
| 63 | + "Bash(base64:*)", |
| 64 | + "Bash(xxd:*)", |
| 65 | + "Bash(od:*)", |
| 66 | + "Bash(hexdump:*)", |
| 67 | + "Bash(date:*)", |
| 68 | + "Bash(cal:*)", |
| 69 | + "Bash(sleep:*)", |
| 70 | + "Bash(time:*)", |
| 71 | + "Bash(timeout:*)", |
| 72 | + "Bash(env:*)", |
| 73 | + "Bash(export:*)", |
| 74 | + "Bash(unset:*)", |
| 75 | + "Bash(set:*)", |
| 76 | + "Bash(source:*)", |
| 77 | + "Bash(eval:*)", |
| 78 | + "Bash(exec:*)", |
| 79 | + "Bash(nohup:*)", |
| 80 | + "Bash(yes:*)", |
| 81 | + "Bash(seq:*)", |
| 82 | + "Bash(expr:*)", |
| 83 | + "Bash(bc:*)", |
| 84 | + "Bash(dc:*)", |
| 85 | + "Bash(uname:*)", |
| 86 | + "Bash(hostname:*)", |
| 87 | + "Bash(whoami:*)", |
| 88 | + "Bash(id:*)", |
| 89 | + "Bash(groups:*)", |
| 90 | + "Bash(df:*)", |
| 91 | + "Bash(du:*)", |
| 92 | + "Bash(free:*)", |
| 93 | + "Bash(uptime:*)", |
| 94 | + "Bash(ps:*)", |
| 95 | + "Bash(top:*)", |
| 96 | + "Bash(htop:*)", |
| 97 | + "Bash(lsof:*)", |
| 98 | + "Bash(ss:*)", |
| 99 | + "Bash(netstat:*)", |
| 100 | + "Bash(ip:*)", |
| 101 | + "Bash(ifconfig:*)", |
| 102 | + "Bash(ping:*)", |
| 103 | + "Bash(traceroute:*)", |
| 104 | + "Bash(nslookup:*)", |
| 105 | + "Bash(dig:*)", |
| 106 | + "Bash(host:*)", |
| 107 | + "Bash(curl:*)", |
| 108 | + "Bash(wget:*)", |
| 109 | + "Bash(tar:*)", |
| 110 | + "Bash(zip:*)", |
| 111 | + "Bash(unzip:*)", |
| 112 | + "Bash(gzip:*)", |
| 113 | + "Bash(gunzip:*)", |
| 114 | + "Bash(bzip2:*)", |
| 115 | + "Bash(bunzip2:*)", |
| 116 | + "Bash(git add:*)", |
| 117 | + "Bash(git commit:*)", |
| 118 | + "Bash(git config:*)", |
| 119 | + "Bash(git remote:*)", |
| 120 | + "Bash(git init:*)", |
| 121 | + "Bash(git log:*)", |
| 122 | + "Bash(git status:*)", |
| 123 | + "Bash(git diff:*)", |
| 124 | + "Bash(git branch:*)", |
| 125 | + "Bash(git checkout:*)", |
| 126 | + "Bash(git switch:*)", |
| 127 | + "Bash(git stash:*)", |
| 128 | + "Bash(git merge:*)", |
| 129 | + "Bash(git rebase:*)", |
| 130 | + "Bash(git cherry-pick:*)", |
| 131 | + "Bash(git tag:*)", |
| 132 | + "Bash(git fetch:*)", |
| 133 | + "Bash(git pull:*)", |
| 134 | + "Bash(git show:*)", |
| 135 | + "Bash(git blame:*)", |
| 136 | + "Bash(git shortlog:*)", |
| 137 | + "Bash(git rev-parse:*)", |
| 138 | + "Bash(git rev-list:*)", |
| 139 | + "Bash(git ls-files:*)", |
| 140 | + "Bash(git ls-tree:*)", |
| 141 | + "Bash(git describe:*)", |
| 142 | + "Bash(git reflog:*)", |
| 143 | + "Bash(git bisect:*)", |
| 144 | + "Bash(git worktree:*)", |
| 145 | + "Bash(git submodule:*)", |
| 146 | + "Bash(git archive:*)", |
| 147 | + "Bash(git format-patch:*)", |
| 148 | + "Bash(git am:*)", |
| 149 | + "Bash(git apply:*)", |
| 150 | + "Bash(git clean -n:*)", |
| 151 | + "Bash(git -C:*)", |
| 152 | + "Bash(GIT_SSH_COMMAND:*)", |
| 153 | + "Bash(gh:*)", |
| 154 | + "Bash(php:*)", |
| 155 | + "Bash(composer:*)", |
| 156 | + "Bash(./vendor/bin/phpunit:*)", |
| 157 | + "Bash(./vendor/bin/phpstan:*)", |
| 158 | + "Bash(./vendor/bin/phpcs:*)", |
| 159 | + "Bash(./vendor/bin/phpcbf:*)", |
| 160 | + "Bash(./vendor/bin/php-cs-fixer:*)", |
| 161 | + "Bash(./vendor/bin/psalm:*)", |
| 162 | + "Bash(./vendor/bin/phinx:*)", |
| 163 | + "Bash(node:*)", |
| 164 | + "Bash(npm:*)", |
| 165 | + "Bash(npx:*)", |
| 166 | + "Bash(yarn:*)", |
| 167 | + "Bash(pnpm:*)", |
| 168 | + "Bash(bun:*)", |
| 169 | + "Bash(tsc:*)", |
| 170 | + "Bash(eslint:*)", |
| 171 | + "Bash(prettier:*)", |
| 172 | + "Bash(python:*)", |
| 173 | + "Bash(python3:*)", |
| 174 | + "Bash(pip:*)", |
| 175 | + "Bash(pip3:*)", |
| 176 | + "Bash(mysql:*)", |
| 177 | + "Bash(mysqldump:*)", |
| 178 | + "Bash(mariadb:*)", |
| 179 | + "Bash(sqlite3:*)", |
| 180 | + "Bash(docker:*)", |
| 181 | + "Bash(docker-compose:*)", |
| 182 | + "Bash(docker compose:*)", |
| 183 | + "Bash(ssh:*)", |
| 184 | + "Bash(scp:*)", |
| 185 | + "Bash(rsync:*)", |
| 186 | + "Bash(sftp:*)", |
| 187 | + "Bash(jq:*)", |
| 188 | + "Bash(yq:*)", |
| 189 | + "Bash(xmllint:*)", |
| 190 | + "Bash(csvtool:*)", |
| 191 | + "Bash(shellcheck:*)", |
| 192 | + "Bash(bash:*)", |
| 193 | + "Bash(sh:*)", |
| 194 | + "Bash(zsh:*)", |
| 195 | + "Bash(./motspilot/motspilot.sh:*)", |
| 196 | + "Bash(./scripts:*)", |
| 197 | + "Bash(powershell.exe:*)", |
| 198 | + "Bash(cmd.exe:*)", |
| 199 | + "Bash(wsl:*)", |
| 200 | + "Bash(wslpath:*)", |
| 201 | + "Bash(code:*)", |
| 202 | + "Bash(open:*)", |
| 203 | + "Bash(start:*)", |
| 204 | + "Bash(xdg-open:*)", |
| 205 | + "Bash(less:*)", |
| 206 | + "Bash(more:*)", |
| 207 | + "Bash(tree:*)", |
| 208 | + "Bash(watch:*)", |
| 209 | + "Bash(iconv:*)", |
| 210 | + "Bash(dos2unix:*)", |
| 211 | + "Bash(unix2dos:*)", |
| 212 | + "Bash(patch:*)", |
| 213 | + "Bash(make:*)", |
| 214 | + "Bash(cmake:*)", |
| 215 | + "Bash(for:*)", |
| 216 | + "Bash(while:*)", |
| 217 | + "Bash(if:*)", |
| 218 | + "Bash([[:*)", |
| 219 | + "Bash(case:*)", |
| 220 | + "Bash(do echo:*)", |
| 221 | + "Bash(which ollama:*)", |
| 222 | + "Bash(/mnt/c/Users/*/AppData/Local/Programs/Ollama/ollama.exe list:*)", |
| 223 | + "Bash(~/.local/bin/shfmt -i 4 -ci -d motspilot.sh 2>&1 | head -80)", |
| 224 | + "Bash(~/.local/bin/shfmt -i 4 -ci -d motspilot.sh 2>&1)", |
| 225 | + "Bash(~/.local/bin/shfmt -i 4 -ci -d motspilot.sh 2>&1; echo \"EXIT: $?\")", |
| 226 | + "Bash(~/.local/bin/shfmt -f . 2>&1)", |
| 227 | + "Bash(~/.local/bin/shfmt --version)", |
| 228 | + "Bash(curl -sL https://github.com/mvdan/sh/releases/download/v3.12.0/shfmt_v3.12.0_linux_amd64 -o /tmp/shfmt312 && chmod +x /tmp/shfmt312 && /tmp/shfmt312 -i 4 -ci -d motspilot.sh 2>&1 | head -40)", |
| 229 | + "Bash(sudo apt-get:*)" |
| 230 | + ], |
| 231 | + "deny": [ |
| 232 | + "Bash(git push:*)", |
| 233 | + "Bash(git push --force:*)", |
| 234 | + "Bash(git reset --hard:*)", |
| 235 | + "Bash(git clean -f:*)", |
| 236 | + "Bash(rm -rf:*)", |
| 237 | + "Bash(rm -r:*)", |
| 238 | + "Bash(rmdir:*)", |
| 239 | + "Bash(del:*)", |
| 240 | + "Bash(format:*)", |
| 241 | + "Bash(mkfs:*)", |
| 242 | + "Bash(dd:*)", |
| 243 | + "Bash(shred:*)", |
| 244 | + "Bash(truncate:*)" |
| 245 | + ] |
| 246 | + } |
| 247 | +} |
0 commit comments