jpmschweitzerandClaude
56b991c965
toj is now on the global PATH as /usr/local/bin/toj, so its scope boundary had to stop being "the absolute path is inconvenient to type" and start being a rule. Its repo and settings verbs operate on the workspace root; run from inside this repo they answer about the wrong tree. Both spellings are denied, bare and absolute, because a deny with one spelling left open is decorative. Co-Authored-By: Claude <noreply@anthropic.com>
67 lines
1.8 KiB
JSON
67 lines
1.8 KiB
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Bash(pql)",
|
|
"Bash(pql *)",
|
|
"Bash(/home/jpmschweitzer/.local/bin/pql:*)",
|
|
"Bash(git status:*)",
|
|
"Bash(git log:*)",
|
|
"Bash(git diff:*)",
|
|
"Bash(git branch:*)",
|
|
"Bash(.venv/bin/python -m pytest:*)",
|
|
"Bash(.venv/bin/pytest:*)",
|
|
"Bash(pytest:*)",
|
|
"Bash(alembic *)",
|
|
"Bash(docker logs core-api:*)",
|
|
"Bash(curl -s http://localhost:8083/*)"
|
|
],
|
|
"deny": [
|
|
"Bash(/mnt/media/Projects/cladmin/ops/bin/toj)",
|
|
"Bash(/mnt/media/Projects/cladmin/ops/bin/toj:*)",
|
|
"Bash(alembic downgrade base*)",
|
|
"Bash(chmod -R 777 *)",
|
|
"Bash(chmod 777 *)",
|
|
"Bash(dd if=*)",
|
|
"Bash(find * -delete*)",
|
|
"Bash(find * -exec*)",
|
|
"Bash(git * add --all*)",
|
|
"Bash(git * add -A*)",
|
|
"Bash(git * add .)",
|
|
"Bash(git * branch -D *)",
|
|
"Bash(git * checkout -- *)",
|
|
"Bash(git * clean -fd*)",
|
|
"Bash(git * clean -fdx*)",
|
|
"Bash(git * commit --no-verify*)",
|
|
"Bash(git * merge --no-ff*)",
|
|
"Bash(git * push --force*)",
|
|
"Bash(git * push -f*)",
|
|
"Bash(git * reset --hard*)",
|
|
"Bash(git * restore .*)",
|
|
"Bash(git add --all*)",
|
|
"Bash(git add -A*)",
|
|
"Bash(git add .)",
|
|
"Bash(git branch -D *)",
|
|
"Bash(git checkout -- *)",
|
|
"Bash(git clean -fd*)",
|
|
"Bash(git clean -fdx*)",
|
|
"Bash(git commit --no-verify*)",
|
|
"Bash(git merge --no-ff*)",
|
|
"Bash(git push --force*)",
|
|
"Bash(git push -f*)",
|
|
"Bash(git reset --hard*)",
|
|
"Bash(git restore .*)",
|
|
"Bash(mkfs*)",
|
|
"Bash(psql * -c DROP*)",
|
|
"Bash(psql * DROP DATABASE*)",
|
|
"Bash(psql * TRUNCATE*)",
|
|
"Bash(rm -rf $HOME*)",
|
|
"Bash(rm -rf /*)",
|
|
"Bash(rm -rf ~*)",
|
|
"Bash(su *)",
|
|
"Bash(sudo *)",
|
|
"Bash(toj)",
|
|
"Bash(toj:*)"
|
|
]
|
|
}
|
|
}
|